Issues

• Add support for Deny in DeletionPolicy and UpdateReplacePolicy

  enhancement
  aws-cloudformation/cloudformation-coverage-roadmap#2584 · Filter by author rittneje opened on Oct 3, 2026

• AWS::ApiGateway::RestApi - [BUG] - Removing Policy leaves the resource policy in place

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2583 · Filter by author dirkluijk opened on Oct 2, 2026

• [AWS::RTBFabric::Link] - [Coverage] - Support accepting links (AcceptLink)

  aws-cloudformation/cloudformation-coverage-roadmap#2582 · Filter by author nitrocode opened on Oct 1, 2026

• AWS::SMSVOICE::Pool - [BUG] - Read returns empty TwoWay.ChannelArn/ChannelRole, so every Cloud Control UpdateResource fails validation

  aws-cloudformation/cloudformation-coverage-roadmap#2581 · Filter by author tomasakim opened on Sep 30, 2026

• [AWS::DevOpsAgent::Association] - [Coverage] - Add "capabilities" property (e.g. RELEASE_READINESS_REVIEW) to resource schema

  Coverage
  aws-cloudformation/cloudformation-coverage-roadmap#2580 · Filter by author ebrooks42 opened on Sep 21, 2026

• Clarify declared read-handler permissions for AWS::Connect::Queue and AWS::Lambda::Function

  aws-cloudformation/cloudformation-coverage-roadmap#2579 · Filter by author jrestrepo78 opened on Sep 20, 2026

• [AWS::BedrockAgentCore::Gateway] - [Bug] - AuthorizerType is mutable in the CloudFormation schema but AgentCore rejects authorizer-type updates

  aws-cloudformation/cloudformation-coverage-roadmap#2578 · Filter by author tonzdev opened on Sep 17, 2026

• AWS::DMS::Endpoint - [BUG] - False-positive drift on KmsKeyId for S3 endpoints (always returned as null)

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2577 · Filter by author rgoltz opened on Sep 16, 2026

• [AWS::GlobalAccelerator:Accelerator] - [BUG] - Intermittent Internal Error fails drift detection for the whole stack

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2576 · Filter by author chreekat opened on Sep 16, 2026

• # \[AWS::Connect::Instance\] Add AutomatedInteractionLog to Attributes

  Coverage
  aws-cloudformation/cloudformation-coverage-roadmap#2575 · Filter by author abhisar12 opened on Sep 15, 2026

• [AWS::EC2::AccountSetting] - [Coverage] - Missing CloudFormation support

  Coverage
  aws-cloudformation/cloudformation-coverage-roadmap#2574 · Filter by author r-heimann opened on Sep 12, 2026

• [AWS::ECS::AccountSetting] - [Coverage] - Missing CloudFormation support

  Coverage
  aws-cloudformation/cloudformation-coverage-roadmap#2573 · Filter by author r-heimann opened on Sep 12, 2026

• [AWS::SSM::ServiceSetting] - [BUG] - False-positive drift when specifying the SSM "System" default value

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2572 · Filter by author r-heimann opened on Sep 11, 2026

• [AWS::Lambda::EventInvokeConfig] - [BUG] - False-positive drift on FunctionName as ARN

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2571 · Filter by author r-heimann opened on Sep 10, 2026

• [AWS::InspectorV2::Filter] - [Coverage] - Add EcrImageInUseCount to FitlerCriteria

  Coverage
  aws-cloudformation/cloudformation-coverage-roadmap#2570 · Filter by author cesar-perceiv opened on Sep 9, 2026

• [AWS::Scheduler::ScheduleGroup] - [Coverage] - Implement console link to AWS Resource from "Resources" tab

  Coverage
  aws-cloudformation/cloudformation-coverage-roadmap#2569 · Filter by author r-heimann opened on Sep 9, 2026

• [AWS::Logs::MetricFilter] - [Coverage] - Implement console link to AWS Resource from "Resources" tab

  Coverage
  aws-cloudformation/cloudformation-coverage-roadmap#2568 · Filter by author r-heimann opened on Sep 9, 2026

• AWS::DMS::Endpoint - [BUG] - False-positive drift on S3Settings.CompressionType (actual value reported lower-cased, resource is in sync)

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2566 · Filter by author rgoltz opened on Sep 7, 2026

• AWS::DMS::Endpoint - [BUG] - False-positive drift on EndpointIdentifier (service lowercases the identifier)

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2565 · Filter by author rgoltz opened on Sep 7, 2026

• AWS::DMS::Endpoint - [BUG] - False-positive drift on KmsKeyId when the template uses the bare key ID

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2564 · Filter by author rgoltz opened on Sep 7, 2026
  1

• AWS::DMS::ReplicationTask - [BUG] - False-positive drift on ReplicationTaskSettings (service default enrichment / field duplication / log-component ordering)

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2563 · Filter by author rgoltz opened on Sep 7, 2026

• [Resource Type] - [Enhancement] - AWS::StepFunctions::StateMachine — Drift detection false positive when using DefinitionSubstitutions

  enhancement
  aws-cloudformation/cloudformation-coverage-roadmap#2562 · Filter by author hasithadulanjana opened on Sep 4, 2026

• AWS::DMS::ReplicationTask - [BUG] - False-positive drift on ReplicationTaskIdentifier (service lowercases the identifier)

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2561 · Filter by author rgoltz opened on Sep 4, 2026

• AWS::DMS::ReplicationSubnetGroup - [BUG] - False-positive drift on ReplicationSubnetGroupIdentifier (service lowercases the identifier)

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2560 · Filter by author rgoltz opened on Sep 4, 2026

• [Resource Type] - [BUG] - REVERT_DRIFT change sets report phantom changes for Fn::GetStackOutput properties on IN_SYNC stacks

  bug
  aws-cloudformation/cloudformation-coverage-roadmap#2559 · Filter by author Salominius opened on Sep 2, 2026