autogenerated maintenance

docs/rules.md

@@ -46,7 +46,7 @@ To include these rules, use the `-e/include-experimental` argument when running
 ## Rules
 (_This documentation is generated by running `cfn-lint --update-documentation`, do not alter this manually_)
 
-The following **146** rules are applied by this linter:
+The following **147** rules are applied by this linter:
 
 | Rule ID  | Title | Description | Config<br />(Name:Type:Default) | Source | Tags |
 | -------- | ----- | ----------- | ---------- | ------ | ---- |
@@ -135,6 +135,7 @@ The following **146** rules are applied by this linter:
 | [E3503<a name="E3503"></a>](../src/cfnlint/rules/resources/certificatemanager/DomainValidationOptions.py) | ValidationDomain is superdomain of DomainName | In ValidationDomainOptions, the ValidationDomain must be a superdomain of the DomainName being validated |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-certificatemanager-certificate-domainvalidationoption.html#cfn-certificatemanager-certificate-domainvalidationoption-validationdomain) | `certificate`,`certificatemanager`,`domainvalidationoptions`,`validationdomain` |
 | [E3504<a name="E3504"></a>](../src/cfnlint/rules/resources/backup/BackupPlanLifecycleRule.py) | Check minimum 90 period is met between BackupPlan cold and delete | Check that Backup plans with lifecycle rules have >= 90 days between cold and delete |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupplan-lifecycleresourcetype.html) | `properties`,`backup`,`plan`,`lifecycle` |
 | [E4001<a name="E4001"></a>](../src/cfnlint/rules/metadata/InterfaceConfiguration.py) | Metadata Interface have appropriate properties | Metadata Interface properties are properly configured |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-interface.html) | `metadata` |
+| [E4002<a name="E4002"></a>](../src/cfnlint/rules/metadata/Config.py) | Validate the configuration of the Metadata section | Validates that Metadata section is an object and has no null values |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/metadata-section-structure.html) | `metadata` |
 | [E5001<a name="E5001"></a>](../src/cfnlint/rules/resources/Modules.py) | Check that Modules resources are valid | Check that Modules resources are valid |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/) | `resources`,`modules` |
 | [E6001<a name="E6001"></a>](../src/cfnlint/rules/outputs/Configuration.py) | Outputs have appropriate properties | Making sure the outputs are properly configured |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/outputs-section-structure.html) | `outputs` |
 | [E6002<a name="E6002"></a>](../src/cfnlint/rules/outputs/Required.py) | Outputs have required properties | Making sure the outputs have required properties |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/outputs-section-structure.html) | `outputs` |

src/cfnlint/data/AdditionalSpecs/Policies.json

@@ -1562,7 +1562,7 @@
       ]
     },
     "AWS CodeCommit": {
-      "ARNFormat": "arn:aws:codecommit:<region>:<account_ID>:<repository_name>",
+      "ARNFormat": "arn:aws:codecommit:${Region}:${Account}:${RepositoryName}",
       "ARNRegex": "^arn:aws:codecommit:.+",
       "Actions": [
         "AssociateApprovalRuleTemplateWithRepository",
@@ -5667,6 +5667,7 @@
         "GetPrivateConnectivityConfig",
         "GetSite",
         "GetSiteAddress",
+        "ListAssets",
         "ListCatalogItems",
         "ListOrders",
         "ListOutposts",
@@ -6136,6 +6137,7 @@
         "PutUserWorkspaceSettings",
         "TagResource",
         "UntagResource",
+        "UpdateAccountExportSettings",
         "UpdateChart",
         "UpdateConnection",
         "UpdateFileFolder",
@@ -9605,8 +9607,8 @@
       ]
     },
     "Amazon DynamoDB Accelerator (DAX)": {
-      "ARNFormat": "arn:aws:dax:${Region}:${Account}:cache/${ClusterName}",
-      "ARNRegex": "^arn:aws:dax:.+:[0-9]+:cache/[a-zA-Z0-9_.-]+",
+      "ARNFormat": "arn:${Partition}:dax:${Region}:${Account}:cache/${ClusterName}",
+      "ARNRegex": "^arn:${Partition}:dax:.+:[0-9]+:cache/[a-zA-Z0-9_.-]+",
       "Actions": [
         "BatchGetItem",
         "BatchWriteItem",
@@ -13537,6 +13539,7 @@
         "aws:RequestTag/${TagKey}",
         "aws:ResourceTag/${TagKey}",
         "aws:TagKeys",
+        "ses:ApiVersion",
         "ses:FeedbackAddress",
         "ses:FromAddress",
         "ses:FromDisplayName",
@@ -14924,7 +14927,7 @@
       ]
     },
     "Amazon SES": {
-      "ARNFormat": "arn:${Partition}:ses:${Region}:${Account}:${resourceType}/${resourceId}",
+      "ARNFormat": "arn:${Partition}:ses:${Region}:${Account}:${ResourceType}/${ResourceId}",
       "ARNRegex": "^arn:${Partition}:ses:.+:[0-9]+:.+",
       "Actions": [
         "CloneReceiptRuleSet",
@@ -15002,6 +15005,7 @@
       "HasResource": true,
       "StringPrefix": "ses",
       "conditionKeys": [
+        "ses:ApiVersion",
         "ses:FeedbackAddress",
         "ses:FromAddress",
         "ses:FromDisplayName",
@@ -15503,6 +15507,7 @@
         "aws:RequestTag/${TagKey}",
         "aws:ResourceTag/${TagKey}",
         "aws:TagKeys",
+        "ses:ApiVersion",
         "ses:FeedbackAddress",
         "ses:FromAddress",
         "ses:FromDisplayName",