aws

Documentation

Overview

Package aws implements cloud resource discovery for Amazon Web Services. It makes per-service API calls using the AWS SDK v2 and follows the two-phase scan pattern: resources are written first, relationships second.

Index

• Constants
• func CollectEmits() []coverage.TypeDecl
• type EdgeDecl
  • func CollectResolverEdges() []EdgeDecl
• type ResolverInfo
  • func ListResolvers() []ResolverInfo
• type Scanner
  • func (s *Scanner) LongDescription() string
  • func (s *Scanner) Name() string
  • func (s *Scanner) RegionNames() []string
  • func (s *Scanner) Scan(ctx context.Context, st *store.Store, scanID string) error
  • func (s *Scanner) ServiceFilterExample() string
  • func (s *Scanner) ServiceNames() []string
  • func (s *Scanner) SetIncludeServiceQuotas(include bool)
  • func (s *Scanner) SetProfile(profile string)
  • func (s *Scanner) SetRegionOverride(regions []string)
  • func (s *Scanner) SetRegionScope(enabled bool)
  • func (s *Scanner) SetRoleOverride(roleARN, externalID string)
  • func (s *Scanner) SetServiceFilter(services []string)
  • func (s *Scanner) SetSkipGlobals(skip bool)
  • func (s *Scanner) SetSourceIdentity(sourceIdentity string)

Constants

const (
	// EC2 — compute management (ec2_compute_mgmt_scanners.go)
	TypeEC2Instance                = "aws:ec2:instance"
	TypeEC2Image                   = "aws:ec2:image"
	TypeEC2SecurityGroup           = "aws:ec2:security-group"
	TypeEC2Volume                  = "aws:ec2:volume"
	TypeEC2Snapshot                = "aws:ec2:snapshot"
	TypeEC2ReservedInstances       = "aws:ec2:reserved-instances"
	TypeEC2SpotInstanceRequest     = "aws:ec2:spot-instances-request"
	TypeEC2SecondaryInterface      = "aws:ec2:secondary-interface"
	TypeEC2SecondaryNetwork        = "aws:ec2:secondary-network"
	TypeEC2SecondarySubnet         = "aws:ec2:secondary-subnet"
	TypeEC2InstanceEventWindow     = "aws:ec2:instance-event-window"
	TypeEC2HostReservation         = "aws:ec2:host-reservation"
	TypeEC2CapacityBlock           = "aws:ec2:capacity-block"
	TypeEC2FpgaImage               = "aws:ec2:fpga-image"
	TypeEC2PublicIpv4Pool          = "aws:ec2:ipv4pool-ec2"
	TypeEC2Ipv6Pool                = "aws:ec2:ipv6pool-ec2"
	TypeEC2LaunchTemplate          = "aws:ec2:launch-template"
	TypeEC2KeyPair                 = "aws:ec2:key-pair"
	TypeEC2PlacementGroup          = "aws:ec2:placement-group"
	TypeEC2SpotFleet               = "aws:ec2:spot-fleet"
	TypeEC2Host                    = "aws:ec2:host"
	TypeEC2CapacityReservation     = "aws:ec2:capacity-reservation"
	TypeEC2InstanceConnectEndpoint = "aws:ec2:instance-connect-endpoint"
	// EC2 — networking (ec2_networking_scanners.go)
	TypeEC2VPC                  = "aws:ec2:vpc"
	TypeEC2Subnet               = "aws:ec2:subnet"
	TypeEC2InternetGateway      = "aws:ec2:internet-gateway"
	TypeEC2NatGateway           = "aws:ec2:nat-gateway"
	TypeEC2RouteTable           = "aws:ec2:route-table"
	TypeEC2EIP                  = "aws:ec2:eip"
	TypeEC2NetworkInterface     = "aws:ec2:network-interface"
	TypeEC2NetworkACL           = "aws:ec2:network-acl"
	TypeEC2VPCEndpoint          = "aws:ec2:vpc-endpoint"
	TypeEC2VPCPeeringConnection = "aws:ec2:vpc-peering-connection"
	TypeEC2DHCPOptions          = "aws:ec2:dhcp-options"
	TypeEC2EgressOnlyIGW        = "aws:ec2:egress-only-internet-gateway"
	// EC2 — VPN (ec2_vpn_scanners.go)
	TypeEC2CustomerGateway          = "aws:ec2:customer-gateway"
	TypeEC2VPNGateway               = "aws:ec2:vpn-gateway"
	TypeEC2VPNConnection            = "aws:ec2:vpn-connection"
	TypeEC2TransitGateway           = "aws:ec2:transit-gateway"
	TypeEC2TransitGatewayAttachment = "aws:ec2:transit-gateway-attachment"
	// EC2 — observability (ec2_observability_scanners.go)
	TypeEC2FlowLog                            = "aws:ec2:flow-log"
	TypeEC2PrefixList                         = "aws:ec2:prefix-list"
	TypeEC2NetworkInsightsPath                = "aws:ec2:network-insights-path"
	TypeEC2NetworkInsightsAnalysis            = "aws:ec2:network-insights-analysis"
	TypeEC2NetworkInsightsAccessScope         = "aws:ec2:network-insights-access-scope"
	TypeEC2NetworkInsightsAccessScopeAnalysis = "aws:ec2:network-insights-access-scope-analysis"
	// EC2 — IPAM (ec2_ipam_scanners.go)
	TypeEC2IPAM                                  = "aws:ec2:ipam"
	TypeEC2IpamPolicy                            = "aws:ec2:ipam-policy"
	TypeEC2IpamExternalResourceVerificationToken = "aws:ec2:ipam-external-resource-verification-token"
	TypeEC2IPAMScope                             = "aws:ec2:ipam-scope"
	TypeEC2IPAMPool                              = "aws:ec2:ipam-pool"
	TypeEC2IPAMPoolCIDR                          = "aws:ec2:ipam-pool-cidr"
	TypeEC2IPAMAllocation                        = "aws:ec2:ipam-allocation"
	TypeEC2IPAMResourceDiscovery                 = "aws:ec2:ipam-resource-discovery"
	TypeEC2IPAMResourceDiscoveryAssociation      = "aws:ec2:ipam-resource-discovery-association"
	// EC2 — Transit Gateway extended (ec2_tgw_ext_scanners.go)
	TypeEC2TransitGatewayConnect                    = "aws:ec2:transit-gateway-connect"
	TypeEC2TransitGatewayConnectPeer                = "aws:ec2:transit-gateway-connect-peer"
	TypeEC2TransitGatewayMulticastDomain            = "aws:ec2:transit-gateway-multicast-domain"
	TypeEC2TransitGatewayMulticastDomainAssociation = "aws:ec2:transit-gateway-multicast-domain-association"
	TypeEC2TransitGatewayMulticastGroupMember       = "aws:ec2:transit-gateway-multicast-group-member"
	TypeEC2TransitGatewayMulticastGroupSource       = "aws:ec2:transit-gateway-multicast-group-source"
	TypeEC2TransitGatewayPeeringAttachment          = "aws:ec2:transit-gateway-peering-attachment"
	TypeEC2TransitGatewayPolicyTable                = "aws:ec2:transit-gateway-policy-table"
	TypeEC2TransitGatewayRouteTable                 = "aws:ec2:transit-gateway-route-table"
	TypeEC2TransitGatewayRouteTableAnnouncement     = "aws:ec2:transit-gateway-route-table-announcement"
	TypeEC2TransitGatewayRouteTableAssociation      = "aws:ec2:transit-gateway-route-table-association"
	TypeEC2TransitGatewayRouteTablePropagation      = "aws:ec2:transit-gateway-route-table-propagation"
	TypeEC2TransitGatewayVPCAttachment              = "aws:ec2:transit-gateway-vpc-attachment"
	TypeEC2TransitGatewayRoute                      = "aws:ec2:transit-gateway-route"
	// EC2 — Traffic Mirroring (ec2_traffic_mirror_scanners.go)
	TypeEC2TrafficMirrorFilter     = "aws:ec2:traffic-mirror-filter"
	TypeEC2TrafficMirrorFilterRule = "aws:ec2:traffic-mirror-filter-rule"
	TypeEC2TrafficMirrorSession    = "aws:ec2:traffic-mirror-session"
	TypeEC2TrafficMirrorTarget     = "aws:ec2:traffic-mirror-target"
	// EC2 — Verified Access (ec2_verified_access_scanners.go)
	TypeEC2VerifiedAccessInstance      = "aws:ec2:verified-access-instance"
	TypeEC2VerifiedAccessTrustProvider = "aws:ec2:verified-access-trust-provider"
	TypeEC2VerifiedAccessGroup         = "aws:ec2:verified-access-group"
	TypeEC2VerifiedAccessEndpoint      = "aws:ec2:verified-access-endpoint"
	// EC2 — Local Gateway (ec2_local_gateway_scanners.go)
	TypeEC2LocalGateway                         = "aws:ec2:local-gateway"
	TypeEC2CoipPool                             = "aws:ec2:coip-pool"
	TypeEC2OutpostLag                           = "aws:ec2:outpost-lag"
	TypeEC2LocalGatewayRouteTable               = "aws:ec2:local-gateway-route-table"
	TypeEC2LocalGatewayRoute                    = "aws:ec2:local-gateway-route"
	TypeEC2LocalGatewayVirtualInterface         = "aws:ec2:local-gateway-virtual-interface"
	TypeEC2LocalGatewayVirtualInterfaceGroup    = "aws:ec2:local-gateway-virtual-interface-group"
	TypeEC2LocalGatewayRouteTableVPCAssociation = "aws:ec2:local-gateway-route-table-vpc-association"
	TypeEC2LocalGatewayRouteTableVIGAssociation = "aws:ec2:local-gateway-route-table-virtual-interface-group-association"
	// EC2 — Client VPN (ec2_client_vpn_scanners.go)
	TypeEC2ClientVPNEndpoint                 = "aws:ec2:client-vpn-endpoint"
	TypeEC2ClientVPNAuthorizationRule        = "aws:ec2:client-vpn-authorization-rule"
	TypeEC2ClientVPNRoute                    = "aws:ec2:client-vpn-route"
	TypeEC2ClientVPNTargetNetworkAssociation = "aws:ec2:client-vpn-target-network-association"
	// EC2 — extended resources (ec2_compute_mgmt_scanners.go, ec2_networking_scanners.go)
	TypeEC2CapacityReservationFleet          = "aws:ec2:capacity-reservation-fleet"
	TypeEC2Fleet                             = "aws:ec2:ec2-fleet"
	TypeEC2CarrierGateway                    = "aws:ec2:carrier-gateway"
	TypeEC2VPCBlockPublicAccessOptions       = "aws:ec2:vpc-block-public-access-options"
	TypeEC2VPCBlockPublicAccessExclusion     = "aws:ec2:vpc-block-public-access-exclusion"
	TypeEC2VPCEndpointConnectionNotification = "aws:ec2:vpc-endpoint-connection-notification"
	TypeEC2VPCEndpointService                = "aws:ec2:vpc-endpoint-service"
	TypeEC2VPCEndpointServicePermissions     = "aws:ec2:vpc-endpoint-service-permissions"
	TypeEC2SecurityGroupVPCAssociation       = "aws:ec2:security-group-vpc-association"
	TypeEC2NetworkInterfacePermission        = "aws:ec2:network-interface-permission"
	TypeEC2SnapshotBlockPublicAccess         = "aws:ec2:snapshot-block-public-access"
	// EC2 — Route Server (ec2_route_server_scanners.go)
	TypeEC2RouteServer         = "aws:ec2:route-server"
	TypeEC2RouteServerEndpoint = "aws:ec2:route-server-endpoint"
	TypeEC2RouteServerPeer     = "aws:ec2:route-server-peer"
	// EC2 — IPAM Prefix List Resolver (ec2_ipam_resolver_scanners.go)
	TypeEC2IPAMPrefixListResolver       = "aws:ec2:ipam-prefix-list-resolver"
	TypeEC2IPAMPrefixListResolverTarget = "aws:ec2:ipam-prefix-list-resolver-target"
	// EC2 — Misc (ec2_misc_extra_scanners.go)
	TypeEC2CapacityManagerDataExport            = "aws:ec2:capacity-manager-data-export"
	TypeEC2NetworkPerformanceMetricSubscription = "aws:ec2:network-performance-metric-subscription"
	TypeEC2TransitGatewayMeteringPolicy         = "aws:ec2:transit-gateway-metering-policy"
	TypeEC2VPCEncryptionControl                 = "aws:ec2:vpc-encryption-control"
	TypeEC2VPNConcentrator                      = "aws:ec2:vpn-concentrator"
	// IoT — Things (iot_things_scanners.go)
	TypeIoTThing                    = "aws:iot:thing"
	TypeIoTThingGroup               = "aws:iot:thing-group"
	TypeIoTThingType                = "aws:iot:thing-type"
	TypeIoTBillingGroup             = "aws:iot:billing-group"
	TypeIoTThingPrincipalAttachment = "aws:iot:thing-principal-attachment"
	// IoT — Certs/Auth (iot_certs_scanners.go)
	TypeIoTCertificate               = "aws:iot:certificate"
	TypeIoTCACertificate             = "aws:iot:ca-certificate"
	TypeIoTCertificateProvider       = "aws:iot:certificate-provider"
	TypeIoTPolicy                    = "aws:iot:policy"
	TypeIoTPolicyPrincipalAttachment = "aws:iot:policy-principal-attachment"
	TypeIoTRoleAlias                 = "aws:iot:role-alias"
	TypeIoTAuthorizer                = "aws:iot:authorizer"
	TypeIoTDomainConfiguration       = "aws:iot:domain-configuration"
	// IoT — Defender (iot_defender_scanners.go)
	TypeIoTAccountAuditConfiguration = "aws:iot:account-audit-configuration"
	TypeIoTScheduledAudit            = "aws:iot:scheduled-audit"
	TypeIoTMitigationAction          = "aws:iot:mitigation-action"
	TypeIoTSecurityProfile           = "aws:iot:security-profile"
	TypeIoTCustomMetric              = "aws:iot:custom-metric"
	TypeIoTDimension                 = "aws:iot:dimension"
	// IoT — Jobs (iot_jobs_scanners.go)
	TypeIoTCommand              = "aws:iot:command"
	TypeIoTJobTemplate          = "aws:iot:job-template"
	TypeIoTFleetMetric          = "aws:iot:fleet-metric"
	TypeIoTProvisioningTemplate = "aws:iot:provisioning-template"
	TypeIoTIndex                = "aws:iot:index"
	TypeIoTJob                  = "aws:iot:job"
	TypeIoTOTAUpdate            = "aws:iot:ota-update"
	TypeIoTStream               = "aws:iot:stream"
	// IoT — Software (iot_software_scanners.go)
	TypeIoTSoftwarePackage        = "aws:iot:software-package"
	TypeIoTSoftwarePackageVersion = "aws:iot:software-package-version"
	// IoT — Topic Rules (iot_topic_scanners.go)
	TypeIoTTopicRule            = "aws:iot:topic-rule"
	TypeIoTTopicRuleDestination = "aws:iot:topic-rule-destination"
	// IoT — Logging/Encryption (iot_logging_scanners.go)
	TypeIoTLogging                 = "aws:iot:logging"
	TypeIoTResourceSpecificLogging = "aws:iot:resource-specific-logging"
	TypeIoTEncryptionConfiguration = "aws:iot:encryption-configuration"
	// IAM — principals
	TypeIAMRole              = "aws:iam:role"
	TypeIAMUser              = "aws:iam:user"
	TypeIAMGroup             = "aws:iam:group"
	TypeIAMServiceLinkedRole = "aws:iam:service-linked-role"
	// IAM — policies and credentials
	TypeIAMPolicy      = "aws:iam:managed-policy"
	TypeIAMRolePolicy  = "aws:iam:role-policy"
	TypeIAMUserPolicy  = "aws:iam:user-policy"
	TypeIAMGroupPolicy = "aws:iam:group-policy"
	TypeIAMAccessKey   = "aws:iam:access-key"
	// IAM — identity provider and certificate resources
	TypeIAMInstanceProfile   = "aws:iam:instance-profile"
	TypeIAMOIDCProvider      = "aws:iam:oidc-provider"
	TypeIAMSAMLProvider      = "aws:iam:saml-provider"
	TypeIAMServerCertificate = "aws:iam:server-certificate"
	TypeIAMVirtualMFADevice  = "aws:iam:virtual-mfa-device"
	// IAM — the AWS account itself (account-level posture: summary, aliases,
	// password policy). NativeID = arn:aws:iam::<acct>:root. IAM scanner
	// populates one per scanned account; cross-account-trust / org-management
	// resolvers insert an empty-attribute placeholder here for out-of-scope
	// referenced accounts (version-populates if later scanned).
	TypeIAMAccount = "aws:iam:account"
	// Lambda
	TypeLambdaFunction          = "aws:lambda:function"
	TypeLambdaAlias             = "aws:lambda:alias"
	TypeLambdaCapacityProvider  = "aws:lambda:capacity-provider"
	TypeLambdaCodeSigningConfig = "aws:lambda:code-signing-config"
	TypeLambdaEventInvokeConfig = "aws:lambda:event-invoke-config"
	TypeLambdaESM               = "aws:lambda:event-source-mapping"
	TypeLambdaLayerVersion      = "aws:lambda:layer-version"
	TypeLambdaURL               = "aws:lambda:url"
	TypeLambdaVersion           = "aws:lambda:version"
	// RDS
	TypeRDSCustomDBEngineVersion   = "aws:rds:custom-db-engine-version"
	TypeRDSDBCluster               = "aws:rds:db-cluster"
	TypeRDSDBClusterParameterGroup = "aws:rds:db-cluster-parameter-group"
	TypeRDSDBInstance              = "aws:rds:db-instance"
	TypeRDSDBParameterGroup        = "aws:rds:db-parameter-group"
	TypeRDSDBProxy                 = "aws:rds:db-proxy"
	TypeRDSDBProxyEndpoint         = "aws:rds:db-proxy-endpoint"
	TypeRDSDBProxyTargetGroup      = "aws:rds:db-proxy-target-group"
	TypeRDSDBSecurityGroup         = "aws:rds:db-security-group"
	TypeRDSDBShardGroup            = "aws:rds:db-shard-group"
	TypeRDSDBSubnetGroup           = "aws:rds:db-subnet-group"
	TypeRDSEventSubscription       = "aws:rds:event-subscription"
	TypeRDSGlobalCluster           = "aws:rds:global-cluster"
	TypeRDSIntegration             = "aws:rds:integration"
	TypeRDSOptionGroup             = "aws:rds:option-group"
	// RDS — Service-Reference-only types (no CloudFormation twin); segments
	// mirror the SR keys and match via the algorithmic PascalCase fold.
	TypeRDSSnapshot               = "aws:rds:snapshot"
	TypeRDSClusterSnapshot        = "aws:rds:cluster-snapshot"
	TypeRDSClusterEndpoint        = "aws:rds:cluster-endpoint"
	TypeRDSReservedInstance       = "aws:rds:ri"
	TypeRDSAutoBackup             = "aws:rds:auto-backup"
	TypeRDSClusterAutoBackup      = "aws:rds:cluster-auto-backup"
	TypeRDSTenantDatabase         = "aws:rds:tenant-database"
	TypeRDSSnapshotTenantDatabase = "aws:rds:snapshot-tenant-database"
	TypeRDSDeployment             = "aws:rds:deployment"
	// DynamoDB
	TypeDynamoDBTable       = "aws:dynamodb:table"
	TypeDynamoDBGlobalTable = "aws:dynamodb:global-table"
	TypeDynamoDBStream      = "aws:dynamodb:stream"
	TypeDynamoDBBackup      = "aws:dynamodb:backup"
	// EFS (efs_scanners.go, efs_resolvers.go)
	TypeEFSFileSystem  = "aws:efs:file-system"
	TypeEFSMountTarget = "aws:efs:mount-target"
	TypeEFSAccessPoint = "aws:efs:access-point"
	// WAFv2 (wafv2_scanners.go, wafv2_resolvers.go)
	TypeWAFv2WebACL               = "aws:wafv2:web-acl"
	TypeWAFv2RuleGroup            = "aws:wafv2:rule-group"
	TypeWAFv2IPSet                = "aws:wafv2:ip-set"
	TypeWAFv2LoggingConfiguration = "aws:wafv2:logging-configuration"
	TypeWAFv2RegexPatternSet      = "aws:wafv2:regex-pattern-set"
	TypeWAFv2WebACLAssociation    = "aws:wafv2:web-acl-association"
	TypeWAFv2ManagedRuleSet       = "aws:wafv2:managed-rule-set"
	// WAF Classic v1 — global/CloudFront scope (waf_scanners.go)
	TypeWAFWebACL               = "aws:waf:web-acl"
	TypeWAFRule                 = "aws:waf:rule"
	TypeWAFRuleGroup            = "aws:waf:rule-group"
	TypeWAFRateBasedRule        = "aws:waf:rate-based-rule"
	TypeWAFIPSet                = "aws:waf:ip-set"
	TypeWAFByteMatchSet         = "aws:waf:byte-match-set"
	TypeWAFGeoMatchSet          = "aws:waf:geo-match-set"
	TypeWAFRegexMatchSet        = "aws:waf:regex-match-set"
	TypeWAFRegexPatternSet      = "aws:waf:regex-pattern-set"
	TypeWAFSizeConstraintSet    = "aws:waf:size-constraint-set"
	TypeWAFSQLInjectionMatchSet = "aws:waf:sql-injection-match-set"
	TypeWAFXSSMatchSet          = "aws:waf:xss-match-set"
	// WAF Classic v1 — regional scope (wafregional_scanners.go, wafregional_resolvers.go)
	TypeWAFRegionalWebACL               = "aws:wafregional:web-acl"
	TypeWAFRegionalRule                 = "aws:wafregional:rule"
	TypeWAFRegionalRuleGroup            = "aws:wafregional:rule-group"
	TypeWAFRegionalRateBasedRule        = "aws:wafregional:rate-based-rule"
	TypeWAFRegionalIPSet                = "aws:wafregional:ip-set"
	TypeWAFRegionalByteMatchSet         = "aws:wafregional:byte-match-set"
	TypeWAFRegionalGeoMatchSet          = "aws:wafregional:geo-match-set"
	TypeWAFRegionalRegexMatchSet        = "aws:wafregional:regex-match-set"
	TypeWAFRegionalRegexPatternSet      = "aws:wafregional:regex-pattern-set"
	TypeWAFRegionalSizeConstraintSet    = "aws:wafregional:size-constraint-set"
	TypeWAFRegionalSQLInjectionMatchSet = "aws:wafregional:sql-injection-match-set"
	TypeWAFRegionalXSSMatchSet          = "aws:wafregional:xss-match-set"
	TypeWAFRegionalWebACLAssociation    = "aws:wafregional:web-acl-association"
	// Network Firewall (networkfirewall_scanners.go, networkfirewall_resolvers.go)
	TypeNetworkFirewallFirewall                   = "aws:network-firewall:firewall"
	TypeNetworkFirewallFirewallPolicy             = "aws:network-firewall:firewall-policy"
	TypeNetworkFirewallRuleGroup                  = "aws:network-firewall:rule-group"
	TypeNetworkFirewallLoggingConfiguration       = "aws:network-firewall:logging-configuration"
	TypeNetworkFirewallTLSInspectionConfiguration = "aws:network-firewall:tls-inspection-configuration"
	TypeNetworkFirewallVpcEndpointAssociation     = "aws:network-firewall:vpc-endpoint-association"
	TypeNetworkFirewallProxyConfiguration         = "aws:network-firewall:proxy-configuration"
	TypeNetworkFirewallProxyRuleGroup             = "aws:network-firewall:proxy-rule-group"
	// EventBridge (eventbridge_scanners.go, eventbridge_resolvers.go)
	TypeEventsEventBus       = "aws:events:event-bus"
	TypeEventsRule           = "aws:events:rule"
	TypeEventsAPIDestination = "aws:events:api-destination"
	TypeEventsConnection     = "aws:events:connection"
	TypeEventsArchive        = "aws:events:archive"
	TypeEventsEndpoint       = "aws:events:endpoint"
	TypeEventsEventBusPolicy = "aws:events:event-bus-policy"
	TypeEventsEventSource    = "aws:events:event-source"
	// CloudTrail (cloudtrail_scanners.go, cloudtrail_resolvers.go)
	TypeCloudTrailTrail          = "aws:cloudtrail:trail"
	TypeCloudTrailEventDataStore = "aws:cloudtrail:event-data-store"
	// StepFunctions (sfn_scanners.go, sfn_resolvers.go)
	TypeSFNStateMachine = "aws:sfn:state-machine"
	TypeSFNActivity     = "aws:sfn:activity"
	// Cognito (cognito_scanners.go, cognito_resolvers.go)
	TypeCognitoUserPool     = "aws:cognito:user-pool"
	TypeCognitoIdentityPool = "aws:cognito:identity-pool"
	TypeCognitoAppClient    = "aws:cognito:user-pool-client"
	// Cognito — extended (cognito_extended_scanners.go)
	TypeCognitoUserPoolDomain                      = "aws:cognito:user-pool-domain"
	TypeCognitoUserPoolGroup                       = "aws:cognito:user-pool-group"
	TypeCognitoUserPoolIdentityProvider            = "aws:cognito:user-pool-identity-provider"
	TypeCognitoUserPoolResourceServer              = "aws:cognito:user-pool-resource-server"
	TypeCognitoUserPoolRiskConfigurationAttachment = "aws:cognito:user-pool-risk-configuration-attachment"
	TypeCognitoUserPoolUICustomizationAttachment   = "aws:cognito:user-pool-ui-customization-attachment"
	TypeCognitoLogDeliveryConfiguration            = "aws:cognito:log-delivery-configuration"
	TypeCognitoTerms                               = "aws:cognito:terms"
	TypeCognitoIdentityPoolRoleAttachment          = "aws:cognito:identity-pool-role-attachment"
	TypeCognitoManagedLoginBranding                = "aws:cognito:managed-login-branding"
	// AppStream (appstream_scanners.go)
	TypeAppStreamAppBlock                          = "aws:appstream:app-block"
	TypeAppStreamAppBlockBuilder                   = "aws:appstream:app-block-builder"
	TypeAppStreamApplication                       = "aws:appstream:application"
	TypeAppStreamApplicationEntitlementAssociation = "aws:appstream:application-entitlement-association"
	TypeAppStreamApplicationFleetAssociation       = "aws:appstream:application-fleet-association"
	TypeAppStreamDirectoryConfig                   = "aws:appstream:directory-config"
	TypeAppStreamEntitlement                       = "aws:appstream:entitlement"
	TypeAppStreamFleet                             = "aws:appstream:fleet"
	TypeAppStreamImageBuilder                      = "aws:appstream:image-builder"
	TypeAppStreamImage                             = "aws:appstream:image"
	TypeAppStreamStack                             = "aws:appstream:stack"
	TypeAppStreamStackFleetAssociation             = "aws:appstream:stack-fleet-association"
	TypeAppStreamStackUserAssociation              = "aws:appstream:stack-user-association"
	TypeAppStreamUser                              = "aws:appstream:user"
	// Wisdom (Amazon Q Connect — qconnect SDK) (wisdom_scanners.go)
	TypeWisdomAssistant              = "aws:wisdom:assistant"
	TypeWisdomAssistantAssociation   = "aws:wisdom:assistant-association"
	TypeWisdomAIAgent                = "aws:wisdom:ai-agent"
	TypeWisdomAIAgentVersion         = "aws:wisdom:ai-agent-version"
	TypeWisdomAIGuardrail            = "aws:wisdom:ai-guardrail"
	TypeWisdomAIGuardrailVersion     = "aws:wisdom:ai-guardrail-version"
	TypeWisdomAIPrompt               = "aws:wisdom:ai-prompt"
	TypeWisdomAIPromptVersion        = "aws:wisdom:ai-prompt-version"
	TypeWisdomKnowledgeBase          = "aws:wisdom:knowledge-base"
	TypeWisdomMessageTemplate        = "aws:wisdom:message-template"
	TypeWisdomMessageTemplateVersion = "aws:wisdom:message-template-version"
	TypeWisdomQuickResponse          = "aws:wisdom:quick-response"
	TypeWisdomContent                = "aws:wisdom:content"
	TypeWisdomContentAssociation     = "aws:wisdom:content-association"
	// EKS
	TypeEKSCluster                = "aws:eks:cluster"
	TypeEKSAccessEntry            = "aws:eks:access-entry"
	TypeEKSAddon                  = "aws:eks:addon"
	TypeEKSCapability             = "aws:eks:capability"
	TypeEKSFargateProfile         = "aws:eks:fargate-profile"
	TypeEKSIdentityProviderConfig = "aws:eks:identity-provider-config"
	TypeEKSNodegroup              = "aws:eks:nodegroup"
	TypeEKSPodIdentityAssociation = "aws:eks:pod-identity-association"
	TypeEKSAnywhereSubscription   = "aws:eks:eks-anywhere-subscription"

	TypeElastiCacheReservedInstance        = "aws:elasticache:reserved-instance"
	TypeElastiCacheServerlessCacheSnapshot = "aws:elasticache:serverlesscachesnapshot"
	TypeElastiCacheSnapshot                = "aws:elasticache:snapshot"
	// Classic ELB (elb_classic_scanners.go, elb_classic_resolvers.go)
	TypeELBClassicLoadBalancer = "aws:elasticloadbalancing:load-balancer"
	// ELBv2 (elb_scanners.go, elb_resolvers.go)
	TypeELBv2LoadBalancer         = "aws:elasticloadbalancingv2:load-balancer"
	TypeELBv2Listener             = "aws:elasticloadbalancingv2:listener"
	TypeELBv2ListenerCertificate  = "aws:elasticloadbalancingv2:listener-certificate"
	TypeELBv2ListenerRule         = "aws:elasticloadbalancingv2:listener-rule"
	TypeELBv2TargetGroup          = "aws:elasticloadbalancingv2:target-group"
	TypeELBv2TrustStore           = "aws:elasticloadbalancingv2:trust-store"
	TypeELBv2TrustStoreRevocation = "aws:elasticloadbalancingv2:trust-store-revocation"
	// S3 — buckets (s3_scanners.go)
	TypeS3Bucket = "aws:s3:bucket"
	// S3 — extended (s3_scanners.go, s3control_scanners.go)
	TypeS3BucketPolicy                 = "aws:s3:bucket-policy"
	TypeS3AccessGrantsInstance         = "aws:s3:access-grants-instance"
	TypeS3AccessGrantsLocation         = "aws:s3:access-grants-location"
	TypeS3AccessGrant                  = "aws:s3:access-grant"
	TypeS3AccessPoint                  = "aws:s3:access-point"
	TypeS3MultiRegionAccessPoint       = "aws:s3:multi-region-access-point"
	TypeS3MultiRegionAccessPointPolicy = "aws:s3:multi-region-access-point-policy"
	TypeS3StorageLens                  = "aws:s3:storage-lens"
	TypeS3StorageLensGroup             = "aws:s3:storage-lens-group"
	// Service Quotas
	TypeServiceQuota = "aws:servicequotas:quota"
	// SNS
	TypeSNSTopic        = "aws:sns:topic"
	TypeSNSSubscription = "aws:sns:subscription"
	TypeSNSTopicPolicy  = "aws:sns:topic-policy"
	// SQS
	TypeSQSQueue = "aws:sqs:queue"
	// ECS
	TypeECSCluster                             = "aws:ecs:cluster"
	TypeECSService                             = "aws:ecs:service"
	TypeECSTaskDefinition                      = "aws:ecs:task-definition"
	TypeECSCapacityProvider                    = "aws:ecs:capacity-provider"
	TypeECSClusterCapacityProviderAssociations = "aws:ecs:cluster-capacity-provider-associations"
	TypeECSTaskSet                             = "aws:ecs:task-set"
	TypeECSContainerInstance                   = "aws:ecs:container-instance"
	TypeECSTask                                = "aws:ecs:task"
	TypeECSDaemon                              = "aws:ecs:daemon"
	TypeECSDaemonTaskDefinition                = "aws:ecs:daemon-task-definition"
	// ECR
	TypeECRRepository                 = "aws:ecr:repository"
	TypeECRPublicRepository           = "aws:ecr:public-repository"
	TypeECRPullThroughCacheRule       = "aws:ecr:pull-through-cache-rule"
	TypeECRPullTimeUpdateExclusion    = "aws:ecr:pull-time-update-exclusion"
	TypeECRRegistryPolicy             = "aws:ecr:registry-policy"
	TypeECRRegistryScanningConfig     = "aws:ecr:registry-scanning-configuration"
	TypeECRReplicationConfiguration   = "aws:ecr:replication-configuration"
	TypeECRRepositoryCreationTemplate = "aws:ecr:repository-creation-template"
	TypeECRSigningConfiguration       = "aws:ecr:signing-configuration"
	// ElastiCache
	TypeElastiCacheReplicationGroup       = "aws:elasticache:replication-group"
	TypeElastiCacheCacheCluster           = "aws:elasticache:cache-cluster"
	TypeElastiCacheGlobalReplicationGroup = "aws:elasticache:global-replication-group"
	TypeElastiCacheParameterGroup         = "aws:elasticache:parameter-group"
	TypeElastiCacheSecurityGroup          = "aws:elasticache:security-group"
	TypeElastiCacheServerlessCache        = "aws:elasticache:serverless-cache"
	TypeElastiCacheSubnetGroup            = "aws:elasticache:subnet-group"
	TypeElastiCacheUser                   = "aws:elasticache:user"
	TypeElastiCacheUserGroup              = "aws:elasticache:user-group"
	// CloudFront
	TypeCloudFrontDistribution                = "aws:cloudfront:distribution"
	TypeCloudFrontAnycastIPList               = "aws:cloudfront:anycast-ip-list"
	TypeCloudFrontCachePolicy                 = "aws:cloudfront:cache-policy"
	TypeCloudFrontOAI                         = "aws:cloudfront:cloud-front-origin-access-identity"
	TypeCloudFrontConnectionFunction          = "aws:cloudfront:connection-function"
	TypeCloudFrontConnectionGroup             = "aws:cloudfront:connection-group"
	TypeCloudFrontContinuousDeploymentPolicy  = "aws:cloudfront:continuous-deployment-policy"
	TypeCloudFrontDistributionTenant          = "aws:cloudfront:distribution-tenant"
	TypeCloudFrontFunction                    = "aws:cloudfront:function"
	TypeCloudFrontKeyGroup                    = "aws:cloudfront:key-group"
	TypeCloudFrontKeyValueStore               = "aws:cloudfront:key-value-store"
	TypeCloudFrontMonitoringSubscription      = "aws:cloudfront:monitoring-subscription"
	TypeCloudFrontOriginAccessControl         = "aws:cloudfront:origin-access-control"
	TypeCloudFrontOriginRequestPolicy         = "aws:cloudfront:origin-request-policy"
	TypeCloudFrontPublicKey                   = "aws:cloudfront:public-key"
	TypeCloudFrontRealtimeLogConfig           = "aws:cloudfront:realtime-log-config"
	TypeCloudFrontResponseHeadersPolicy       = "aws:cloudfront:response-headers-policy"
	TypeCloudFrontStreamingDistribution       = "aws:cloudfront:streaming-distribution"
	TypeCloudFrontTrustStore                  = "aws:cloudfront:trust-store"
	TypeCloudFrontVpcOrigin                   = "aws:cloudfront:vpc-origin"
	TypeCloudFrontFieldLevelEncryptionConfig  = "aws:cloudfront:field-level-encryption-config"
	TypeCloudFrontFieldLevelEncryptionProfile = "aws:cloudfront:field-level-encryption-profile"
	// Route53
	TypeRoute53HostedZone     = "aws:route53:hosted-zone"
	TypeRoute53RecordSet      = "aws:route53:record-set"
	TypeRoute53CIDRCollection = "aws:route53:cidr-collection"
	TypeRoute53DNSSEC         = "aws:route53:dnssec"
	TypeRoute53HealthCheck    = "aws:route53:health-check"
	TypeRoute53KeySigningKey  = "aws:route53:key-signing-key"

	TypeRoute53DelegationSet         = "aws:route53:delegation-set"
	TypeRoute53QueryLoggingConfig    = "aws:route53:query-logging-config"
	TypeRoute53TrafficPolicy         = "aws:route53:traffic-policy"
	TypeRoute53TrafficPolicyInstance = "aws:route53:traffic-policy-instance"
	// API Gateway v1 (apigateway_scanners.go, apigateway_resolvers.go)
	TypeAPIGatewayRestAPI               = "aws:apigateway:rest-api"
	TypeAPIGatewayAccount               = "aws:apigateway:account"
	TypeAPIGatewayAPIKey                = "aws:apigateway:api-key"
	TypeAPIGatewayAuthorizer            = "aws:apigateway:authorizer"
	TypeAPIGatewayBasePathMapping       = "aws:apigateway:base-path-mapping"
	TypeAPIGatewayClientCertificate     = "aws:apigateway:client-certificate"
	TypeAPIGatewayDeployment            = "aws:apigateway:deployment"
	TypeAPIGatewayDocumentationPart     = "aws:apigateway:documentation-part"
	TypeAPIGatewayDocumentationVersion  = "aws:apigateway:documentation-version"
	TypeAPIGatewayDomainName            = "aws:apigateway:domain-name"
	TypeAPIGatewayDomainNameAccessAssoc = "aws:apigateway:domain-name-access-association"
	TypeAPIGatewayGatewayResponse       = "aws:apigateway:gateway-response"
	TypeAPIGatewayMethod                = "aws:apigateway:method"
	TypeAPIGatewayModel                 = "aws:apigateway:model"
	TypeAPIGatewayRequestValidator      = "aws:apigateway:request-validator"
	TypeAPIGatewayResource              = "aws:apigateway:resource"
	TypeAPIGatewayStage                 = "aws:apigateway:stage"
	TypeAPIGatewayUsagePlan             = "aws:apigateway:usage-plan"
	TypeAPIGatewayUsagePlanKey          = "aws:apigateway:usage-plan-key"
	TypeAPIGatewayVpcLink               = "aws:apigateway:vpc-link"
	// API Gateway v2 (apigateway_scanners.go)
	TypeAPIGatewayV2API                  = "aws:apigatewayv2:api"
	TypeAPIGatewayV2Authorizer           = "aws:apigatewayv2:authorizer"
	TypeAPIGatewayBasePathMappingV2      = "aws:apigatewayv2:api-mapping"
	TypeAPIGatewayDomainNameV2           = "aws:apigatewayv2:domain-name"
	TypeAPIGatewayV2Deployment           = "aws:apigatewayv2:deployment"
	TypeAPIGatewayV2Integration          = "aws:apigatewayv2:integration"
	TypeAPIGatewayV2IntegrationResponse  = "aws:apigatewayv2:integration-response"
	TypeAPIGatewayV2Model                = "aws:apigatewayv2:model"
	TypeAPIGatewayV2Route                = "aws:apigatewayv2:route"
	TypeAPIGatewayV2RouteResponse        = "aws:apigatewayv2:route-response"
	TypeAPIGatewayV2Stage                = "aws:apigatewayv2:stage"
	TypeAPIGatewayV2RoutingRule          = "aws:apigatewayv2:routing-rule"
	TypeAPIGatewayPrivateDomainName      = "aws:apigateway:domain-name-v2"
	TypeAPIGatewayPrivateBasePathMapping = "aws:apigateway:base-path-mapping-v2"
	// CloudWatch (cloudwatch_scanners.go)
	TypeCloudWatchAlarm           = "aws:cloudwatch:alarm"
	TypeCloudWatchAlarmMuteRule   = "aws:cloudwatch:alarm-mute-rule"
	TypeCloudWatchAnomalyDetector = "aws:cloudwatch:anomaly-detector"
	TypeCloudWatchCompositeAlarm  = "aws:cloudwatch:composite-alarm"
	TypeCloudWatchDashboard       = "aws:cloudwatch:dashboard"
	TypeCloudWatchInsightRule     = "aws:cloudwatch:insight-rule"
	TypeCloudWatchMetricStream    = "aws:cloudwatch:metric-stream"
	TypeCloudWatchOTelEnrichment  = "aws:cloudwatch:otel-enrichment"
	// CloudWatch Application Signals services — catalogued by upstream under
	// cloudwatch, scanned via the applicationsignals SDK (applicationsignals_scanners.go).
	TypeCloudWatchService = "aws:cloudwatch:service"
	// Cloud9 (cloud9_scanners.go)
	TypeCloud9EnvironmentEC2 = "aws:cloud9:environment-ec2"
	// Chime (chime_scanners.go)
	TypeChimeAppInstance                         = "aws:chime:app-instance"
	TypeChimeAppInstanceBot                      = "aws:chime:app-instance-bot"
	TypeChimeAppInstanceUser                     = "aws:chime:app-instance-user"
	TypeChimeChannelFlow                         = "aws:chime:channel-flow"
	TypeChimeMediaPipeline                       = "aws:chime:media-pipeline"
	TypeChimeMediaInsightsPipelineConfiguration  = "aws:chime:media-insights-pipeline-configuration"
	TypeChimeMediaPipelineKinesisVideoStreamPool = "aws:chime:media-pipeline-kinesis-video-stream-pool"
	TypeChimeSipMediaApplication                 = "aws:chime:sip-media-application"
	TypeChimeVoiceConnector                      = "aws:chime:voice-connector"
	TypeChimeVoiceProfileDomain                  = "aws:chime:voice-profile-domain"
	TypeChimeVoiceProfile                        = "aws:chime:voice-profile"
	// ACM account-config (acm_scanners.go)
	TypeACMAccount = "aws:acm:account"
	// CloudWatch Logs (logs_scanners.go)
	TypeLogsAccountPolicy      = "aws:logs:account-policy"
	TypeLogsDelivery           = "aws:logs:delivery"
	TypeLogsDeliveryDest       = "aws:logs:delivery-destination"
	TypeLogsDeliverySource     = "aws:logs:delivery-source"
	TypeLogsDestination        = "aws:logs:destination"
	TypeLogsIntegration        = "aws:logs:integration"
	TypeLogsLogAnomalyDetector = "aws:logs:log-anomaly-detector"
	TypeLogsLogGroup           = "aws:logs:log-group"
	TypeLogsLogStream          = "aws:logs:log-stream"
	TypeLogsMetricFilter       = "aws:logs:metric-filter"
	TypeLogsQueryDefinition    = "aws:logs:query-definition"
	TypeLogsResourcePolicy     = "aws:logs:resource-policy"
	TypeLogsScheduledQuery     = "aws:logs:scheduled-query"
	TypeLogsSubscriptionFilter = "aws:logs:subscription-filter"
	TypeLogsTransformer        = "aws:logs:transformer"
	TypeLogsLookupTable        = "aws:logs:lookup-table"

	// KMS (kms_scanners.go)
	TypeKMSKey   = "aws:kms:key"
	TypeKMSAlias = "aws:kms:alias"
	TypeKMSGrant = "aws:kms:grant"
	// MSK / Kafka (kafka_scanners.go)
	TypeMSKCluster          = "aws:kafka:cluster"
	TypeMSKBatchScramSecret = "aws:kafka:batch-scram-secret"
	TypeMSKClusterPolicy    = "aws:kafka:cluster-policy"
	TypeMSKConfiguration    = "aws:kafka:configuration"
	TypeMSKReplicator       = "aws:kafka:replicator"
	TypeMSKVpcConnection    = "aws:kafka:vpc-connection"
	// Secrets Manager (secretsmanager_scanners.go)
	TypeSecretsManagerSecret           = "aws:secretsmanager:secret"
	TypeSecretsManagerResourcePolicy   = "aws:secretsmanager:resource-policy"
	TypeSecretsManagerRotationSchedule = "aws:secretsmanager:rotation-schedule"
	// Organizations (organizations_scanners.go)
	TypeOrganization                        = "aws:organizations:organization"
	TypeOrganizationsAccount                = "aws:organizations:account"
	TypeOrganizationsOU                     = "aws:organizations:organizational-unit"
	TypeOrganizationsSCP                    = "aws:organizations:policy"
	TypeOrganizationsRoot                   = "aws:organizations:root"
	TypeOrganizationsResponsibilityTransfer = "aws:organizations:responsibility-transfer"
	// ACM (acm_scanners.go)
	TypeACMCertificate = "aws:acm:certificate"
	TypeACMPrivateCA   = "aws:acm-pca:certificate-authority"
	// Kinesis Data Streams (kinesis_scanners.go)
	TypeKinesisStream = "aws:kinesis:stream"
	// Firehose (firehose_scanners.go)
	TypeFirehoseDeliveryStream = "aws:firehose:delivery-stream"
	// SSM (ssm_scanners.go)
	TypeSSMParameter               = "aws:ssm:parameter"
	TypeSSMDocument                = "aws:ssm:document"
	TypeSSMPatchBaseline           = "aws:ssm:patch-baseline"
	TypeSSMAssociation             = "aws:ssm:association"
	TypeSSMMaintenanceWindow       = "aws:ssm:maintenance-window"
	TypeSSMMaintenanceWindowTarget = "aws:ssm:maintenance-window-target"
	TypeSSMMaintenanceWindowTask   = "aws:ssm:maintenance-window-task"
	TypeSSMResourceDataSync        = "aws:ssm:resource-data-sync"
	TypeSSMManagedInstance         = "aws:ssm:managed-instance"
	TypeSSMOpsMetadata             = "aws:ssm:opsmetadata"
	// GuardDuty (guardduty_scanners.go)
	TypeGuardDutyDetector              = "aws:guardduty:detector"
	TypeGuardDutyFilter                = "aws:guardduty:filter"
	TypeGuardDutyIPSet                 = "aws:guardduty:ipset"
	TypeGuardDutyMember                = "aws:guardduty:member"
	TypeGuardDutyMalwareProtectionPlan = "aws:guardduty:malware-protection-plan"
	TypeGuardDutyPublishingDestination = "aws:guardduty:publishing-destination"
	TypeGuardDutyThreatEntitySet       = "aws:guardduty:threat-entity-set"
	TypeGuardDutyThreatIntelSet        = "aws:guardduty:threat-intel-set"
	TypeGuardDutyTrustedEntitySet      = "aws:guardduty:trusted-entity-set"
	// Config (config_scanners.go)
	TypeConfigRecorder                    = "aws:config:configuration-recorder"
	TypeConfigDeliveryChannel             = "aws:config:delivery-channel"
	TypeConfigRule                        = "aws:config:config-rule"
	TypeConfigAggregationAuthorization    = "aws:config:aggregation-authorization"
	TypeConfigConfigurationAggregator     = "aws:config:configuration-aggregator"
	TypeConfigConformancePack             = "aws:config:conformance-pack"
	TypeConfigOrganizationConfigRule      = "aws:config:organization-config-rule"
	TypeConfigOrganizationConformancePack = "aws:config:organization-conformance-pack"
	TypeConfigRemediationConfiguration    = "aws:config:remediation-configuration"
	TypeConfigStoredQuery                 = "aws:config:stored-query"
	// Backup (backup_scanners.go)
	TypeBackupVault                   = "aws:backup:backup-vault"
	TypeBackupLogicallyAirGappedVault = "aws:backup:logically-air-gapped-backup-vault"
	TypeBackupPlan                    = "aws:backup:backup-plan"
	TypeBackupSelection               = "aws:backup:backup-selection"
	TypeBackupFramework               = "aws:backup:framework"
	TypeBackupReportPlan              = "aws:backup:report-plan"
	TypeBackupRestoreTestingPlan      = "aws:backup:restore-testing-plan"
	TypeBackupRestoreTestingSelection = "aws:backup:restore-testing-selection"
	TypeBackupTieringConfiguration    = "aws:backup:tiering-configuration"
	TypeBackupLegalHold               = "aws:backup:legal-hold"
	TypeBackupRecoveryPoint           = "aws:backup:recovery-point"
	// Backup Gateway (backupgateway_scanners.go)
	TypeBackupGatewayHypervisor     = "aws:backupgateway:hypervisor"
	TypeBackupGatewayGateway        = "aws:backupgateway:gateway"
	TypeBackupGatewayVirtualMachine = "aws:backupgateway:virtual-machine"
	// BCM Data Exports (bcmdataexports_scanners.go)
	TypeBCMDataExportsExport = "aws:bcmdataexports:export"
	// BCM Dashboards (bcmdashboards_scanners.go)
	TypeBCMDashboardsDashboard       = "aws:bcmdashboards:dashboard"
	TypeBCMDashboardsScheduledReport = "aws:bcmdashboards:scheduled-report"
	// BCM Pricing Calculator (bcmpricingcalculator_scanners.go)
	TypeBcmPricingCalculatorBillScenario     = "aws:bcmpricingcalculator:bill-scenario"
	TypeBcmPricingCalculatorBillEstimate     = "aws:bcmpricingcalculator:bill-estimate"
	TypeBcmPricingCalculatorWorkloadEstimate = "aws:bcmpricingcalculator:workload-estimate"
	// Billing (billing_scanners.go, billing_resolvers.go)
	TypeBillingView = "aws:billing:billing-view"
	// Billing Conductor (billingconductor_scanners.go, billingconductor_resolvers.go)
	TypeBillingConductorBillingGroup   = "aws:billingconductor:billing-group"
	TypeBillingConductorCustomLineItem = "aws:billingconductor:custom-line-item"
	TypeBillingConductorPricingPlan    = "aws:billingconductor:pricing-plan"
	TypeBillingConductorPricingRule    = "aws:billingconductor:pricing-rule"
	// Braket (braket_scanners.go, braket_resolvers.go)
	TypeBraketSpendingLimit = "aws:braket:spending-limit"
	// CloudFormation (cloudformation_scanners.go, cloudformation_resolvers.go)
	TypeCloudFormationStack             = "aws:cloudformation:stack"
	TypeCloudFormationStackSet          = "aws:cloudformation:stack-set"
	TypeCloudFormationGeneratedTemplate = "aws:cloudformation:generated-template"
	TypeCloudFormationResourceScan      = "aws:cloudformation:resource-scan"
	TypeCloudFormationType              = "aws:cloudformation:type"
	TypeCloudFormationTypeHook          = "aws:cloudformation:type-hook"
	// CloudHSM (cloudhsm_scanners.go, cloudhsm_resolvers.go)
	TypeCloudHSMCluster = "aws:cloudhsm:cluster"
	TypeCloudHSMBackup  = "aws:cloudhsm:backup"
	// CloudSearch (cloudsearch_scanners.go)
	TypeCloudSearchDomain = "aws:cloudsearch:domain"
	// IAM Identity Center / Identity Store (sso_scanners.go, sso_resolvers.go)
	TypeSSOInstance                                    = "aws:sso:instance"
	TypeSSOPermissionSet                               = "aws:sso:permission-set"
	TypeSSOAccountAssignment                           = "aws:sso:assignment"
	TypeSSOApplication                                 = "aws:sso:application"
	TypeSSOApplicationAssignment                       = "aws:sso:application-assignment"
	TypeSSOInstanceAccessControlAttributeConfiguration = "aws:sso:instance-access-control-attribute-configuration"
	TypeSSOApplicationProvider                         = "aws:sso:application-provider"
	TypeSSOTrustedTokenIssuer                          = "aws:sso:trusted-token-issuer"
	TypeIdentityStoreUser                              = "aws:identitystore:user"
	TypeIdentityStoreGroup                             = "aws:identitystore:group"
	// Macie (macie_scanners.go, macie_resolvers.go)
	TypeMacieSession              = "aws:macie:session"
	TypeMacieClassificationJob    = "aws:macie:classification-job"
	TypeMacieCustomDataIdentifier = "aws:macie:custom-data-identifier"
	TypeMacieAllowList            = "aws:macie:allow-list"
	TypeMacieMember               = "aws:macie:member"
	// SageMaker — Studio (sagemaker_scanners.go)
	TypeSageMakerDomain                = "aws:sagemaker:domain"
	TypeSageMakerUserProfile           = "aws:sagemaker:user-profile"
	TypeSageMakerSpace                 = "aws:sagemaker:space"
	TypeSageMakerApp                   = "aws:sagemaker:app"
	TypeSageMakerAppImageConfig        = "aws:sagemaker:app-image-config"
	TypeSageMakerStudioLifecycleConfig = "aws:sagemaker:studio-lifecycle-config"
	// SageMaker — Training/Notebook (sagemaker_training_scanners.go)
	TypeSageMakerNotebookInstance                = "aws:sagemaker:notebook-instance"
	TypeSageMakerNotebookInstanceLifecycleConfig = "aws:sagemaker:notebook-instance-lifecycle-config"
	TypeSageMakerCodeRepository                  = "aws:sagemaker:code-repository"
	TypeSageMakerProcessingJob                   = "aws:sagemaker:processing-job"
	// SageMaker — Inference (sagemaker_inference_scanners.go)
	TypeSageMakerEndpoint            = "aws:sagemaker:endpoint"
	TypeSageMakerEndpointConfig      = "aws:sagemaker:endpoint-config"
	TypeSageMakerModel               = "aws:sagemaker:model"
	TypeSageMakerInferenceComponent  = "aws:sagemaker:inference-component"
	TypeSageMakerInferenceExperiment = "aws:sagemaker:inference-experiment"
	// SageMaker — Model registry (sagemaker_registry_scanners.go)
	TypeSageMakerModelPackage         = "aws:sagemaker:model-package"
	TypeSageMakerModelPackageGroup    = "aws:sagemaker:model-package-group"
	TypeSageMakerModelCard            = "aws:sagemaker:model-card"
	TypeSageMakerFeatureGroup         = "aws:sagemaker:feature-group"
	TypeSageMakerMlflowTrackingServer = "aws:sagemaker:mlflow-tracking-server"
	// SageMaker — Monitoring (sagemaker_monitoring_scanners.go)
	TypeSageMakerMonitoringSchedule               = "aws:sagemaker:monitoring-schedule"
	TypeSageMakerDataQualityJobDefinition         = "aws:sagemaker:data-quality-job-definition"
	TypeSageMakerModelBiasJobDefinition           = "aws:sagemaker:model-bias-job-definition"
	TypeSageMakerModelExplainabilityJobDefinition = "aws:sagemaker:model-explainability-job-definition"
	TypeSageMakerModelQualityJobDefinition        = "aws:sagemaker:model-quality-job-definition"
	// SageMaker — Pipelines (sagemaker_pipelines_scanners.go)
	TypeSageMakerPipeline   = "aws:sagemaker:pipeline"
	TypeSageMakerProject    = "aws:sagemaker:project"
	TypeSageMakerPartnerApp = "aws:sagemaker:partner-app"
	// SageMaker — Edge / images (sagemaker_edge_scanners.go)
	TypeSageMakerDeviceFleet  = "aws:sagemaker:device-fleet"
	TypeSageMakerDevice       = "aws:sagemaker:device"
	TypeSageMakerImage        = "aws:sagemaker:image"
	TypeSageMakerImageVersion = "aws:sagemaker:image-version"
	// SageMaker — Misc (sagemaker_misc_scanners.go)
	TypeSageMakerCluster  = "aws:sagemaker:cluster"
	TypeSageMakerWorkteam = "aws:sagemaker:workteam"
	// SageMaker — Governance / lineage / hub (sagemaker_governance_scanners.go)
	TypeSageMakerAction                 = "aws:sagemaker:action"
	TypeSageMakerContext                = "aws:sagemaker:context"
	TypeSageMakerExperiment             = "aws:sagemaker:experiment"
	TypeSageMakerExperimentTrial        = "aws:sagemaker:experiment-trial"
	TypeSageMakerHub                    = "aws:sagemaker:hub"
	TypeSageMakerHubContent             = "aws:sagemaker:hub-content"
	TypeSageMakerHumanTaskUI            = "aws:sagemaker:human-task-ui"
	TypeSageMakerFlowDefinition         = "aws:sagemaker:flow-definition"
	TypeSageMakerLineageGroup           = "aws:sagemaker:lineage-group"
	TypeSageMakerAlgorithm              = "aws:sagemaker:algorithm"
	TypeSageMakerWorkforce              = "aws:sagemaker:workforce"
	TypeSageMakerComputeQuota           = "aws:sagemaker:compute-quota"
	TypeSageMakerClusterSchedulerConfig = "aws:sagemaker:cluster-scheduler-config"
	TypeSageMakerEdgeDeploymentPlan     = "aws:sagemaker:edge-deployment-plan"
	TypeSageMakerAIWorkloadConfig       = "aws:sagemaker:ai-workload-config"
	TypeSageMakerMlflowApp              = "aws:sagemaker:mlflow-app"
	TypeSageMakerTrainingPlan           = "aws:sagemaker:training-plan"
	// SageMaker Geospatial (sagemaker_geospatial_scanners.go)
	TypeSageMakerGeospatialRasterDataCollection = "aws:sagemaker-geospatial:raster-data-collection"
	// Connect — Core (connect_core_scanners.go)
	TypeConnectInstance                 = "aws:connect:instance"
	TypeConnectTrafficDistributionGroup = "aws:connect:traffic-distribution-group"
	TypeConnectPhoneNumber              = "aws:connect:phone-number"
	TypeConnectEmailAddress             = "aws:connect:email-address"
	// Connect — Routing (connect_routing_scanners.go)
	TypeConnectQueue            = "aws:connect:queue"
	TypeConnectRoutingProfile   = "aws:connect:routing-profile"
	TypeConnectHoursOfOperation = "aws:connect:hours-of-operation"
	TypeConnectAgentStatus      = "aws:connect:agent-status"
	TypeConnectQuickConnect     = "aws:connect:quick-connect"
	// Connect — Users (connect_users_scanners.go)
	TypeConnectUser                   = "aws:connect:user"
	TypeConnectUserHierarchyGroup     = "aws:connect:user-hierarchy-group"
	TypeConnectUserHierarchyStructure = "aws:connect:user-hierarchy-structure"
	TypeConnectSecurityProfile        = "aws:connect:security-profile"
	TypeConnectPredefinedAttribute    = "aws:connect:predefined-attribute"
	// Connect — Flows (connect_flows_scanners.go)
	TypeConnectContactFlow              = "aws:connect:contact-flow"
	TypeConnectContactFlowVersion       = "aws:connect:contact-flow-version"
	TypeConnectContactFlowModule        = "aws:connect:contact-flow-module"
	TypeConnectContactFlowModuleVersion = "aws:connect:contact-flow-module-version"
	TypeConnectContactFlowModuleAlias   = "aws:connect:contact-flow-module-alias"
	// Connect — Integration (connect_integration_scanners.go)
	TypeConnectApprovedOrigin         = "aws:connect:approved-origin"
	TypeConnectSecurityKey            = "aws:connect:security-key"
	TypeConnectInstanceStorageConfig  = "aws:connect:instance-storage-config"
	TypeConnectIntegrationAssociation = "aws:connect:integration-association"
	TypeConnectNotification           = "aws:connect:notification"
	TypeConnectRule                   = "aws:connect:rule"
	// Connect — Workspace (connect_workspace_scanners.go)
	TypeConnectTaskTemplate   = "aws:connect:task-template"
	TypeConnectEvaluationForm = "aws:connect:evaluation-form"
	TypeConnectView           = "aws:connect:view"
	TypeConnectViewVersion    = "aws:connect:view-version"
	TypeConnectWorkspace      = "aws:connect:workspace"
	TypeConnectPrompt         = "aws:connect:prompt"
	// Connect — extra per-instance leaf resources (connect_extra_scanners.go)
	TypeConnectVocabulary            = "aws:connect:vocabulary"
	TypeConnectAuthenticationProfile = "aws:connect:authentication-profile"
	// Connect — DataTable (connect_datatable_scanners.go)
	TypeConnectDataTable          = "aws:connect:data-table"
	TypeConnectDataTableAttribute = "aws:connect:data-table-attribute"
	TypeConnectDataTableRecord    = "aws:connect:data-table-record"
	// Shield Advanced (shield_scanners.go, shield_resolvers.go)
	TypeShieldProtection      = "aws:shield:protection"
	TypeShieldProtectionGroup = "aws:shield:protection-group"
	// Security Hub (securityhub_scanners.go, securityhub_resolvers.go)
	TypeSecurityHubHub                   = "aws:securityhub:hub"
	TypeSecurityHubInsight               = "aws:securityhub:insight"
	TypeSecurityHubStandardsSubscription = "aws:securityhub:standards-subscription"
	TypeSecurityHubProductSubscription   = "aws:securityhub:product-subscription"
	// SecurityHub — extended (securityhub_extended_scanners.go)
	TypeSecurityHubAggregatorV2              = "aws:securityhub:aggregator-v2"
	TypeSecurityHubAutomationRule            = "aws:securityhub:automation-rule"
	TypeSecurityHubAutomationRuleV2          = "aws:securityhub:automation-rule-v2"
	TypeSecurityHubConfigurationPolicy       = "aws:securityhub:configuration-policy"
	TypeSecurityHubConnectorV2               = "aws:securityhub:connector-v2"
	TypeSecurityHubFindingAggregator         = "aws:securityhub:finding-aggregator"
	TypeSecurityHubHubV2                     = "aws:securityhub:hub-v2"
	TypeSecurityHubOrganizationConfiguration = "aws:securityhub:organization-configuration"
	TypeSecurityHubPolicyAssociation         = "aws:securityhub:policy-association"
	TypeSecurityHubSecurityControl           = "aws:securityhub:security-control"
	TypeSecurityHubStandard                  = "aws:securityhub:standard"
	// MediaConnect (mediaconnect_scanners.go)
	TypeMediaConnectBridge                 = "aws:mediaconnect:bridge"
	TypeMediaConnectBridgeOutput           = "aws:mediaconnect:bridge-output"
	TypeMediaConnectBridgeSource           = "aws:mediaconnect:bridge-source"
	TypeMediaConnectFlow                   = "aws:mediaconnect:flow"
	TypeMediaConnectFlowEntitlement        = "aws:mediaconnect:flow-entitlement"
	TypeMediaConnectFlowOutput             = "aws:mediaconnect:flow-output"
	TypeMediaConnectFlowSource             = "aws:mediaconnect:flow-source"
	TypeMediaConnectFlowVpcInterface       = "aws:mediaconnect:flow-vpc-interface"
	TypeMediaConnectGateway                = "aws:mediaconnect:gateway"
	TypeMediaConnectRouterInput            = "aws:mediaconnect:router-input"
	TypeMediaConnectRouterNetworkInterface = "aws:mediaconnect:router-network-interface"
	TypeMediaConnectRouterOutput           = "aws:mediaconnect:router-output"
	TypeMediaConnectReservation            = "aws:mediaconnect:reservation"
	// AppSync (appsync_scanners.go)
	TypeAppSyncAPI                      = "aws:appsync:api"
	TypeAppSyncAPICache                 = "aws:appsync:api-cache"
	TypeAppSyncAPIKey                   = "aws:appsync:api-key"
	TypeAppSyncChannelNamespace         = "aws:appsync:channel-namespace"
	TypeAppSyncDataSource               = "aws:appsync:data-source"
	TypeAppSyncDomainName               = "aws:appsync:domain-name"
	TypeAppSyncDomainNameAPIAssociation = "aws:appsync:domain-name-api-association"
	TypeAppSyncFunctionConfiguration    = "aws:appsync:function-configuration"
	TypeAppSyncGraphQLApi               = "aws:appsync:graphql-api"
	TypeAppSyncGraphQLSchema            = "aws:appsync:graphql-schema"
	TypeAppSyncSourceAPIAssociation     = "aws:appsync:source-api-association"
	TypeAppSyncResolver                 = "aws:appsync:resolver"
	// AWS Artifact (artifact_scanners.go)
	TypeArtifactCustomerAgreement = "aws:artifact:customer-agreement"
	TypeArtifactReport            = "aws:artifact:report"
	// QuickSight (quicksight_scanners.go)
	TypeQuickSightAccount                = "aws:quicksight:account"
	TypeQuickSightActionConnector        = "aws:quicksight:action-connector"
	TypeQuickSightAgent                  = "aws:quicksight:agent"
	TypeQuickSightAnalysis               = "aws:quicksight:analysis"
	TypeQuickSightAssignment             = "aws:quicksight:assignment"
	TypeQuickSightBrand                  = "aws:quicksight:brand"
	TypeQuickSightCustomization          = "aws:quicksight:customization"
	TypeQuickSightCustomPermissions      = "aws:quicksight:custom-permissions"
	TypeQuickSightDashboard              = "aws:quicksight:dashboard"
	TypeQuickSightDataSet                = "aws:quicksight:data-set"
	TypeQuickSightDataSource             = "aws:quicksight:data-source"
	TypeQuickSightFlow                   = "aws:quicksight:flow"
	TypeQuickSightFolder                 = "aws:quicksight:folder"
	TypeQuickSightGroup                  = "aws:quicksight:group"
	TypeQuickSightKnowledgeBase          = "aws:quicksight:knowledge-base"
	TypeQuickSightNamespace              = "aws:quicksight:namespace"
	TypeQuickSightOAuthClientApplication = "aws:quicksight:oauth-client-application"
	TypeQuickSightRefreshSchedule        = "aws:quicksight:refresh-schedule"
	TypeQuickSightSpace                  = "aws:quicksight:space"
	TypeQuickSightTemplate               = "aws:quicksight:template"
	TypeQuickSightTheme                  = "aws:quicksight:theme"
	TypeQuickSightTopic                  = "aws:quicksight:topic"
	TypeQuickSightUser                   = "aws:quicksight:user"
	TypeQuickSightVPCConnection          = "aws:quicksight:vpc-connection"
	// Route53Resolver (route53resolver_scanners.go)
	TypeRoute53ResolverFirewallDomainList                    = "aws:route53resolver:firewall-domain-list"
	TypeRoute53ResolverFirewallRuleGroup                     = "aws:route53resolver:firewall-rule-group"
	TypeRoute53ResolverFirewallRuleGroupAssociation          = "aws:route53resolver:firewall-rule-group-association"
	TypeRoute53ResolverOutpostResolver                       = "aws:route53resolver:outpost-resolver"
	TypeRoute53ResolverResolverConfig                        = "aws:route53resolver:resolver-config"
	TypeRoute53ResolverResolverDNSSECConfig                  = "aws:route53resolver:resolver-dnssec-config"
	TypeRoute53ResolverResolverEndpoint                      = "aws:route53resolver:resolver-endpoint"
	TypeRoute53ResolverResolverQueryLoggingConfig            = "aws:route53resolver:resolver-query-logging-config"
	TypeRoute53ResolverResolverQueryLoggingConfigAssociation = "aws:route53resolver:resolver-query-logging-config-association"
	TypeRoute53ResolverResolverRule                          = "aws:route53resolver:resolver-rule"
	TypeRoute53ResolverResolverRuleAssociation               = "aws:route53resolver:resolver-rule-association"
	TypeRoute53ResolverFirewallConfig                        = "aws:route53resolver:firewall-config"
	// IoTWireless (iotwireless_scanners.go)
	TypeIoTWirelessDestination                  = "aws:iotwireless:destination"
	TypeIoTWirelessDeviceProfile                = "aws:iotwireless:device-profile"
	TypeIoTWirelessFuotaTask                    = "aws:iotwireless:fuota-task"
	TypeIoTWirelessMulticastGroup               = "aws:iotwireless:multicast-group"
	TypeIoTWirelessNetworkAnalyzerConfiguration = "aws:iotwireless:network-analyzer-configuration"
	TypeIoTWirelessPartnerAccount               = "aws:iotwireless:partner-account"
	TypeIoTWirelessServiceProfile               = "aws:iotwireless:service-profile"
	TypeIoTWirelessTaskDefinition               = "aws:iotwireless:task-definition"
	TypeIoTWirelessWirelessDevice               = "aws:iotwireless:wireless-device"
	TypeIoTWirelessWirelessDeviceImportTask     = "aws:iotwireless:wireless-device-import-task"
	TypeIoTWirelessWirelessGateway              = "aws:iotwireless:wireless-gateway"
	// GameLift (gamelift_scanners.go)
	TypeGameLiftAlias                    = "aws:gamelift:alias"
	TypeGameLiftBuild                    = "aws:gamelift:build"
	TypeGameLiftContainerFleet           = "aws:gamelift:container-fleet"
	TypeGameLiftContainerGroupDefinition = "aws:gamelift:container-group-definition"
	TypeGameLiftFleet                    = "aws:gamelift:fleet"
	TypeGameLiftGameServerGroup          = "aws:gamelift:game-server-group"
	TypeGameLiftGameSessionQueue         = "aws:gamelift:game-session-queue"
	TypeGameLiftLocation                 = "aws:gamelift:location"
	TypeGameLiftMatchmakingConfiguration = "aws:gamelift:matchmaking-configuration"
	TypeGameLiftMatchmakingRuleSet       = "aws:gamelift:matchmaking-rule-set"
	TypeGameLiftScript                   = "aws:gamelift:script"
	// GameLift Streams (gameliftstreams_scanners.go)
	TypeGameLiftStreamsApplication = "aws:gameliftstreams:application"
	TypeGameLiftStreamsStreamGroup = "aws:gameliftstreams:stream-group"
	// Glacier (glacier_scanners.go)
	TypeGlacierVault = "aws:glacier:vault"
	// DMS (dms_scanners.go)
	TypeDMSCertificate            = "aws:dms:certificate"
	TypeDMSDataMigration          = "aws:dms:data-migration"
	TypeDMSDataProvider           = "aws:dms:data-provider"
	TypeDMSEndpoint               = "aws:dms:endpoint"
	TypeDMSEventSubscription      = "aws:dms:event-subscription"
	TypeDMSInstanceProfile        = "aws:dms:instance-profile"
	TypeDMSMigrationProject       = "aws:dms:migration-project"
	TypeDMSReplicationConfig      = "aws:dms:replication-config"
	TypeDMSReplicationInstance    = "aws:dms:replication-instance"
	TypeDMSReplicationSubnetGroup = "aws:dms:replication-subnet-group"
	TypeDMSReplicationTask        = "aws:dms:replication-task"
	// Deadline (deadline_scanners.go)
	TypeDeadlineFarm                  = "aws:deadline:farm"
	TypeDeadlineBudget                = "aws:deadline:budget"
	TypeDeadlineVolume                = "aws:deadline:volume"
	TypeDeadlineFleet                 = "aws:deadline:fleet"
	TypeDeadlineLicenseEndpoint       = "aws:deadline:license-endpoint"
	TypeDeadlineLimit                 = "aws:deadline:limit"
	TypeDeadlineMeteredProduct        = "aws:deadline:metered-product"
	TypeDeadlineMonitor               = "aws:deadline:monitor"
	TypeDeadlineQueue                 = "aws:deadline:queue"
	TypeDeadlineQueueEnvironment      = "aws:deadline:queue-environment"
	TypeDeadlineQueueFleetAssociation = "aws:deadline:queue-fleet-association"
	TypeDeadlineQueueLimitAssociation = "aws:deadline:queue-limit-association"
	TypeDeadlineStorageProfile        = "aws:deadline:storage-profile"
	// WorkSpacesWeb (workspacesweb_scanners.go)
	TypeWSWBrowserSettings           = "aws:workspaces-web:browser-settings"
	TypeWSWDataProtectionSettings    = "aws:workspaces-web:data-protection-settings"
	TypeWSWIdentityProvider          = "aws:workspaces-web:identity-provider"
	TypeWSWIPAccessSettings          = "aws:workspaces-web:ip-access-settings"
	TypeWSWNetworkSettings           = "aws:workspaces-web:network-settings"
	TypeWSWPortal                    = "aws:workspaces-web:portal"
	TypeWSWSessionLogger             = "aws:workspaces-web:session-logger"
	TypeWSWTrustStore                = "aws:workspaces-web:trust-store"
	TypeWSWUserAccessLoggingSettings = "aws:workspaces-web:user-access-logging-settings"
	TypeWSWUserSettings              = "aws:workspaces-web:user-settings"
	// IVS (ivs_scanners.go)
	TypeIVSAdConfiguration           = "aws:ivs:ad-configuration"
	TypeIVSChannel                   = "aws:ivs:channel"
	TypeIVSEncoderConfiguration      = "aws:ivs:encoder-configuration"
	TypeIVSIngestConfiguration       = "aws:ivs:ingest-configuration"
	TypeIVSPlaybackKeyPair           = "aws:ivs:playback-key-pair"
	TypeIVSPlaybackRestrictionPolicy = "aws:ivs:playback-restriction-policy"
	TypeIVSPublicKey                 = "aws:ivs:public-key"
	TypeIVSRecordingConfiguration    = "aws:ivs:recording-configuration"
	TypeIVSStage                     = "aws:ivs:stage"
	TypeIVSStorageConfiguration      = "aws:ivs:storage-configuration"
	TypeIVSStreamKey                 = "aws:ivs:stream-key"
	// Transfer (transfer_scanners.go)
	TypeTransferAgreement   = "aws:transfer:agreement"
	TypeTransferCertificate = "aws:transfer:certificate"
	TypeTransferConnector   = "aws:transfer:connector"
	TypeTransferHostKey     = "aws:transfer:host-key"
	TypeTransferProfile     = "aws:transfer:profile"
	TypeTransferServer      = "aws:transfer:server"
	TypeTransferUser        = "aws:transfer:user"
	TypeTransferWebApp      = "aws:transfer:web-app"
	TypeTransferWorkflow    = "aws:transfer:workflow"
	// QBusiness (qbusiness_scanners.go)
	TypeQBusinessApplication               = "aws:qbusiness:application"
	TypeQBusinessChatResponseConfiguration = "aws:qbusiness:chat-response-configuration"
	TypeQBusinessDataAccessor              = "aws:qbusiness:data-accessor"
	TypeQBusinessDataSource                = "aws:qbusiness:data-source"
	TypeQBusinessIndex                     = "aws:qbusiness:index"
	TypeQBusinessPlugin                    = "aws:qbusiness:plugin"
	TypeQBusinessRetriever                 = "aws:qbusiness:retriever"
	TypeQBusinessSubscription              = "aws:qbusiness:subscription"
	TypeQBusinessWebExperience             = "aws:qbusiness:web-experience"
	// QApps (qapps_scanners.go)
	TypeQAppsQApp = "aws:qapps:qapp"
	// OpenSearch Serverless (opensearchserverless_scanners.go)
	TypeOSSAccessPolicy    = "aws:opensearchserverless:access-policy"
	TypeOSSCollection      = "aws:opensearchserverless:collection"
	TypeOSSCollectionGroup = "aws:opensearchserverless:collection-group"
	TypeOSSLifecyclePolicy = "aws:opensearchserverless:lifecycle-policy"
	TypeOSSSecurityConfig  = "aws:opensearchserverless:security-config"
	TypeOSSSecurityPolicy  = "aws:opensearchserverless:security-policy"
	TypeOSSVpcEndpoint     = "aws:opensearchserverless:vpc-endpoint"
	// Omics (omics_scanners.go)
	TypeOmicsAnnotationStore        = "aws:omics:annotation-store"
	TypeOmicsConfiguration          = "aws:omics:configuration"
	TypeOmicsReferenceStore         = "aws:omics:reference-store"
	TypeOmicsRunGroup               = "aws:omics:run-group"
	TypeOmicsSequenceStore          = "aws:omics:sequence-store"
	TypeOmicsVariantStore           = "aws:omics:variant-store"
	TypeOmicsWorkflow               = "aws:omics:workflow"
	TypeOmicsWorkflowVersion        = "aws:omics:workflow-version"
	TypeOmicsAnnotationStoreVersion = "aws:omics:annotation-store-version"
	TypeOmicsReference              = "aws:omics:reference"
	TypeOmicsRunCache               = "aws:omics:run-cache"
	// Image Builder (imagebuilder_scanners.go)
	TypeImageBuilderComponent                 = "aws:imagebuilder:component"
	TypeImageBuilderContainerRecipe           = "aws:imagebuilder:container-recipe"
	TypeImageBuilderDistributionConfiguration = "aws:imagebuilder:distribution-configuration"
	TypeImageBuilderImage                     = "aws:imagebuilder:image"
	TypeImageBuilderImagePipeline             = "aws:imagebuilder:image-pipeline"
	TypeImageBuilderImageRecipe               = "aws:imagebuilder:image-recipe"
	TypeImageBuilderInfrastructureConfig      = "aws:imagebuilder:infrastructure-configuration"
	TypeImageBuilderLifecyclePolicy           = "aws:imagebuilder:lifecycle-policy"
	TypeImageBuilderWorkflow                  = "aws:imagebuilder:workflow"
	// EMR (emr_scanners.go)
	TypeEMRCluster              = "aws:emr:cluster"
	TypeEMRInstanceFleet        = "aws:emr:instance-fleet-config"
	TypeEMRInstanceGroup        = "aws:emr:instance-group-config"
	TypeEMRSecurityConfig       = "aws:emr:security-configuration"
	TypeEMRStep                 = "aws:emr:step"
	TypeEMRStudio               = "aws:emr:studio"
	TypeEMRStudioSessionMapping = "aws:emr:studio-session-mapping"
	// EMRContainers (emrcontainers_scanners.go)
	TypeEMRContainersVirtualCluster = "aws:emr-containers:virtual-cluster"
	TypeEMRContainersEndpoint       = "aws:emr-containers:endpoint"
	TypeEMRContainersSecurityConfig = "aws:emr-containers:security-configuration"
	TypeEMRContainersJobTemplate    = "aws:emr-containers:job-template"
	// DeviceFarm (devicefarm_scanners.go)
	TypeDeviceFarmProject           = "aws:devicefarm:project"
	TypeDeviceFarmDevicePool        = "aws:devicefarm:device-pool"
	TypeDeviceFarmNetworkProfile    = "aws:devicefarm:network-profile"
	TypeDeviceFarmInstanceProfile   = "aws:devicefarm:instance-profile"
	TypeDeviceFarmDeviceInstance    = "aws:devicefarm:device-instance"
	TypeDeviceFarmVPCEConfiguration = "aws:devicefarm:vpce-configuration"
	TypeDeviceFarmTestGridProject   = "aws:devicefarm:testgrid-project"
	// DevOpsGuru (devopsguru_scanners.go)
	TypeDevOpsGuruNotificationChannel            = "aws:devops-guru:notification-channel"
	TypeDevOpsGuruResourceCollection             = "aws:devops-guru:resource-collection"
	TypeDevOpsGuruLogAnomalyDetectionIntegration = "aws:devops-guru:log-anomaly-detection-integration"
	// DAX (dax_scanners.go)
	TypeDAXCluster        = "aws:dax:cluster"
	TypeDAXParameterGroup = "aws:dax:parameter-group"
	TypeDAXSubnetGroup    = "aws:dax:subnet-group"
	// CodeStarConnections (codestarconnections_scanners.go)
	TypeCodeStarConnectionsConnection        = "aws:codestar-connections:connection"
	TypeCodeStarConnectionsHost              = "aws:codestar-connections:host"
	TypeCodeStarConnectionsRepositoryLink    = "aws:codestar-connections:repository-link"
	TypeCodeStarConnectionsSyncConfiguration = "aws:codestar-connections:sync-configuration"
	// CodePipeline (codepipeline_scanners.go)
	TypeCodePipelinePipeline         = "aws:codepipeline:pipeline"
	TypeCodePipelineCustomActionType = "aws:codepipeline:custom-action-type"
	TypeCodePipelineWebhook          = "aws:codepipeline:webhook"
	// CodeDeploy (codedeploy_scanners.go)
	TypeCodeDeployApplication      = "aws:codedeploy:application"
	TypeCodeDeployDeploymentGroup  = "aws:codedeploy:deployment-group"
	TypeCodeDeployDeploymentConfig = "aws:codedeploy:deployment-config"
	// CodeArtifact (codeartifact_scanners.go)
	TypeCodeArtifactDomain       = "aws:codeartifact:domain"
	TypeCodeArtifactRepository   = "aws:codeartifact:repository"
	TypeCodeArtifactPackageGroup = "aws:codeartifact:package-group"
	// CloudTrail extras (cloudtrail_extended_scanners.go)
	TypeCloudTrailChannel        = "aws:cloudtrail:channel"
	TypeCloudTrailDashboard      = "aws:cloudtrail:dashboard"
	TypeCloudTrailResourcePolicy = "aws:cloudtrail:resource-policy"
	// CleanRoomsML (cleanroomsml_scanners.go)
	TypeCleanRoomsMLConfiguredModelAlgorithm            = "aws:cleanrooms-ml:configured-model-algorithm"
	TypeCleanRoomsMLConfiguredModelAlgorithmAssociation = "aws:cleanrooms-ml:configured-model-algorithm-association"
	TypeCleanRoomsMLTrainingDataset                     = "aws:cleanrooms-ml:training-dataset"
	TypeCleanRoomsMLAudienceModel                       = "aws:cleanrooms-ml:audience-model"
	TypeCleanRoomsMLConfiguredAudienceModel             = "aws:cleanrooms-ml:configured-audience-model"
	TypeCleanRoomsMLMLInputChannel                      = "aws:cleanrooms-ml:ml-input-channel"
	TypeCleanRoomsMLTrainedModel                        = "aws:cleanrooms-ml:trained-model"
	// Chatbot (chatbot_scanners.go)
	TypeChatbotCustomAction                       = "aws:chatbot:custom-action"
	TypeChatbotSlackChannelConfiguration          = "aws:chatbot:slack-channel-configuration"
	TypeChatbotMicrosoftTeamsChannelConfiguration = "aws:chatbot:microsoft-teams-channel-configuration"
	// CostExplorer/CE (costexplorer_scanners.go)
	TypeCEAnomalyMonitor      = "aws:ce:anomaly-monitor"
	TypeCEAnomalySubscription = "aws:ce:anomaly-subscription"
	TypeCECostCategory        = "aws:ce:cost-category"
	// Cassandra/Keyspaces (cassandra_scanners.go)
	TypeCassandraKeyspace = "aws:cassandra:keyspace"
	TypeCassandraTable    = "aws:cassandra:table"
	TypeCassandraType     = "aws:cassandra:type"
	// APS extras (aps_extended_scanners.go)
	TypeAPSAnomalyDetector     = "aws:aps:anomaly-detector"
	TypeAPSRuleGroupsNamespace = "aws:aps:rule-groups-namespace"
	TypeAPSResourcePolicy      = "aws:aps:resource-policy"
	// AmplifyUIBuilder (amplifyuibuilder_scanners.go)
	TypeAmplifyUIBuilderComponent = "aws:amplify-ui-builder:component"
	TypeAmplifyUIBuilderForm      = "aws:amplify-ui-builder:form"
	TypeAmplifyUIBuilderTheme     = "aws:amplify-ui-builder:theme"
	// Synthetics (synthetics_scanners.go)
	TypeSyntheticsCanary = "aws:synthetics:canary"
	TypeSyntheticsGroup  = "aws:synthetics:group"
	// SFN extras (sfn_extended_scanners.go)
	TypeSFNStateMachineAlias   = "aws:stepfunctions:state-machine-alias"
	TypeSFNStateMachineVersion = "aws:stepfunctions:state-machine-version"
	// SSMQuickSetup (ssmquicksetup_scanners.go)
	TypeSSMQuickSetupConfigurationManager = "aws:ssm-quick-setup:configuration-manager"
	// SSMIncidents (ssmincidents_scanners.go)
	TypeSSMIncidentsReplicationSet = "aws:ssm-incidents:replication-set"
	TypeSSMIncidentsResponsePlan   = "aws:ssm-incidents:response-plan"
	// Signer (signer_scanners.go)
	TypeSignerSigningProfile    = "aws:signer:signing-profile"
	TypeSignerProfilePermission = "aws:signer:profile-permission"
	// Shield extras (shield_extended_scanners.go)
	TypeShieldDRTAccess           = "aws:shield:drt-access"
	TypeShieldProactiveEngagement = "aws:shield:proactive-engagement"
	// Scheduler (scheduler_scanners.go)
	TypeSchedulerSchedule      = "aws:scheduler:schedule"
	TypeSchedulerScheduleGroup = "aws:scheduler:schedule-group"
	// S3ObjectLambda (s3objectlambda_scanners.go)
	TypeS3ObjectLambdaAccessPoint       = "aws:s3-object-lambda:access-point"
	TypeS3ObjectLambdaAccessPointPolicy = "aws:s3-object-lambda:access-point-policy"
	// ResourceGroups (resourcegroups_scanners.go)
	TypeResourceGroupsGroup       = "aws:resource-groups:group"
	TypeResourceGroupsTagSyncTask = "aws:resource-groups:tag-sync-task"
	// ResilienceHub (resiliencehub_scanners.go)
	TypeResilienceHubApp                    = "aws:resilience-hub:app"
	TypeResilienceHubResiliencyPolicy       = "aws:resilience-hub:resiliency-policy"
	TypeResilienceHubAppAssessment          = "aws:resilience-hub:app-assessment"
	TypeResilienceHubRecommendationTemplate = "aws:resilience-hub:recommendation-template"
	// RAM (ram_scanners.go)
	TypeRAMResourceShare = "aws:ram:resource-share"
	TypeRAMPermission    = "aws:ram:permission"
	// PCAConnectorSCEP (pcaconnectorscep_scanners.go)
	TypePCAConnectorSCEPConnector = "aws:pca-connector-scep:connector"
	TypePCAConnectorSCEPChallenge = "aws:pca-connector-scep:challenge"
	// PaymentCryptography (paymentcryptography_scanners.go)
	TypePaymentCryptographyKey   = "aws:payment-cryptography:key"
	TypePaymentCryptographyAlias = "aws:payment-cryptography:alias"
	// OAM (oam_scanners.go)
	TypeOAMLink = "aws:oam:link"
	TypeOAMSink = "aws:oam:sink"
	// MPA (mpa_scanners.go)
	TypeMPAApprovalTeam   = "aws:mpa:approval-team"
	TypeMPAIdentitySource = "aws:mpa:identity-source"
	// Macie extras (macie_extended_scanners.go)
	TypeMacieFindingsFilter = "aws:macie:findings-filter"
	// LicenseManager (licensemanager_scanners.go)
	TypeLicenseManagerLicense              = "aws:license-manager:license"
	TypeLicenseManagerGrant                = "aws:license-manager:grant"
	TypeLicenseManagerLicenseConfiguration = "aws:license-manager:license-configuration"
	TypeLicenseManagerReportGenerator      = "aws:license-manager:report-generator"
	TypeLicenseManagerLicenseAssetGroup    = "aws:license-manager:license-asset-group"
	TypeLicenseManagerLicenseAssetRuleset  = "aws:license-manager:license-asset-ruleset"
	// LicenseManagerLinuxSubscriptions (licensemanagerlinuxsubscriptions_scanners.go)
	TypeLicenseManagerLinuxSubscriptionsSubscriptionProvider = "aws:license-manager-linux-subscriptions:subscription-provider"
	// LicenseManagerUserSubscriptions (licensemanagerusersubscriptions_scanners.go)
	TypeLicenseManagerUserSubscriptionsIdentityProvider      = "aws:license-manager-user-subscriptions:identity-provider"
	TypeLicenseManagerUserSubscriptionsLicenseServerEndpoint = "aws:license-manager-user-subscriptions:license-server-endpoint"
	TypeLicenseManagerUserSubscriptionsProductSubscription   = "aws:license-manager-user-subscriptions:product-subscription"
	TypeLicenseManagerUserSubscriptionsInstanceUser          = "aws:license-manager-user-subscriptions:instance-user"
	// Lambda extras (lambda_extended_scanners.go)
	TypeLambdaPermission             = "aws:lambda:permission"
	TypeLambdaLayerVersionPermission = "aws:lambda:layer-version-permission"
	// KinesisVideo (kinesisvideo_scanners.go)
	TypeKinesisVideoStream           = "aws:kinesis-video:stream"
	TypeKinesisVideoSignalingChannel = "aws:kinesis-video:signaling-channel"
	// Kinesis extras (kinesis_extended_scanners.go)
	TypeKinesisStreamConsumer = "aws:kinesis:stream-consumer"
	TypeKinesisResourcePolicy = "aws:kinesis:resource-policy"
	// IVSChat (ivschat_scanners.go)
	TypeIVSChatRoom                 = "aws:ivs-chat:room"
	TypeIVSChatLoggingConfiguration = "aws:ivs-chat:logging-configuration"
	// GreengrassV2 (greengrassv2_scanners.go)
	TypeGreengrassV2ComponentVersion = "aws:greengrass-v2:component-version"
	TypeGreengrassV2Deployment       = "aws:greengrass-v2:deployment"
	TypeGreengrassV2Component        = "aws:greengrass-v2:component"
	TypeGreengrassV2CoreDevice       = "aws:greengrass-v2:core-device"
	// Forecast (forecast_scanners.go)
	TypeForecastDataset        = "aws:forecast:dataset"
	TypeForecastDatasetGroup   = "aws:forecast:dataset-group"
	TypeForecastPredictor      = "aws:forecast:predictor"
	TypeForecastForecast       = "aws:forecast:forecast"
	TypeForecastExplainability = "aws:forecast:explainability"
	TypeForecastMonitor        = "aws:forecast:monitor"
	TypeForecastWhatIfAnalysis = "aws:forecast:what-if-analysis"
	TypeForecastWhatIfForecast = "aws:forecast:what-if-forecast"
	// FIS (fis_scanners.go)
	TypeFISExperimentTemplate         = "aws:fis:experiment-template"
	TypeFISTargetAccountConfiguration = "aws:fis:target-account-configuration"
	// DirectoryService (directoryservice_scanners.go)
	TypeDSMicrosoftAD = "aws:directory-service:microsoft-ad"
	TypeDSSimpleAD    = "aws:directory-service:simple-ad"
	// Detective extras (detective_extended_scanners.go)
	TypeDetectiveOrganizationAdmin = "aws:detective:organization-admin"
	// Comprehend (comprehend_scanners.go)
	TypeComprehendDocumentClassifier         = "aws:comprehend:document-classifier"
	TypeComprehendEntityRecognizer           = "aws:comprehend:entity-recognizer"
	TypeComprehendDocumentClassifierEndpoint = "aws:comprehend:document-classifier-endpoint"
	TypeComprehendEntityRecognizerEndpoint   = "aws:comprehend:entity-recognizer-endpoint"
	TypeComprehendFlywheel                   = "aws:comprehend:flywheel"
	// Budgets (budgets_scanners.go)
	TypeBudgetsBudget        = "aws:budgets:budget"
	TypeBudgetsBudgetsAction = "aws:budgets:budgets-action"
	// WorkSpacesThinClient (workspacesthinclient_scanners.go)
	TypeWorkSpacesThinClientEnvironment = "aws:workspaces-thin-client:environment"
	// VoiceID (voiceid_scanners.go)
	TypeVoiceIDDomain = "aws:voice-id:domain"
	// UXC (uxc_scanners.go)
	TypeUXCAccountCustomization = "aws:uxc:account-customization"
	// SystemsManagerSAP (ssmsap_scanners.go, ssmsap_resolvers.go)
	TypeSSMSAPApplication          = "aws:systems-manager-sap:application"
	TypeSystemsManagerSAPComponent = "aws:systems-manager-sap:component"
	TypeSystemsManagerSAPDatabase  = "aws:systems-manager-sap:database"
	// SSMGuiConnect (ssmguiconnect_scanners.go)
	TypeSSMGuiConnectPreferences = "aws:ssm-gui-connect:preferences"
	// RUM (rum_scanners.go)
	TypeRUMAppMonitor = "aws:rum:app-monitor"
	// Rbin (rbin_scanners.go)
	TypeRbinRule = "aws:rbin:rule"
	// Pipes (pipes_scanners.go)
	TypePipesPipe = "aws:pipes:pipe"
	// OSIS (osis_scanners.go)
	TypeOSISPipeline          = "aws:osis:pipeline"
	TypeOSISPipelineBlueprint = "aws:osis:pipeline-blueprint"
	TypeOSISPipelineEndpoint  = "aws:osis:pipeline-endpoint"
	// Organizations extras (organizations_extended_scanners.go)
	TypeOrganizationsResourcePolicy = "aws:organizations:resource-policy"
	// OpenSearch extras (opensearch_extended_scanners.go)
	TypeOpenSearchApplication = "aws:opensearchservice:application"
	TypeOpenSearchDataSource  = "aws:opensearchservice:data-source"
	// NovaAct (novaact_scanners.go)
	TypeNovaActWorkflowDefinition = "aws:nova-act:workflow-definition"
	// NotificationsContacts (notificationscontacts_scanners.go)
	TypeNotificationsContactsEmailContact = "aws:notifications-contacts:email-contact"
	// MWAAServerless (mwaaserverless_scanners.go)
	TypeMWAAServerlessWorkflow = "aws:mwaa-serverless:workflow"
	// MWAA (mwaa_scanners.go)
	TypeMWAAEnvironment = "aws:mwaa:environment"
	// LookoutEquipment (lookoutequipment_scanners.go)
	TypeLookoutEquipmentInferenceScheduler = "aws:lookout-equipment:inference-scheduler"
	TypeLookoutEquipmentDataset            = "aws:lookout-equipment:dataset"
	TypeLookoutEquipmentLabelGroup         = "aws:lookout-equipment:label-group"
	TypeLookoutEquipmentModel              = "aws:lookout-equipment:model"
	TypeLookoutEquipmentModelVersion       = "aws:lookout-equipment:model-version"
	// LaunchWizard (launchwizard_scanners.go)
	TypeLaunchWizardDeployment = "aws:launch-wizard:deployment"
	// KendraRanking (kendraranking_scanners.go)
	TypeKendraRankingExecutionPlan = "aws:kendra-ranking:execution-plan"
	// IoTCoreDeviceAdvisor (iotdeviceadvisor_scanners.go)
	TypeIoTDeviceAdvisorSuiteDefinition = "aws:iot-core-device-advisor:suite-definition"
	// Invoicing (invoicing_scanners.go)
	TypeInvoicingInvoiceUnit = "aws:invoicing:invoice-unit"
	// InternetMonitor (internetmonitor_scanners.go)
	TypeInternetMonitorMonitor = "aws:internet-monitor:monitor"
	// Interconnect (interconnect_scanners.go)
	TypeInterconnectConnection  = "aws:interconnect:connection"
	TypeInterconnectEnvironment = "aws:interconnect:environment"
	// IdentityStore extras
	TypeIdentityStoreGroupMembership = "aws:identitystore:group-membership"
	// HealthLake (healthlake_scanners.go)
	TypeHealthLakeFHIRDatastore = "aws:health-lake:fhir-datastore"
	// HealthImaging (healthimaging_scanners.go)
	TypeHealthImagingDatastore = "aws:health-imaging:datastore"
	// Grafana (grafana_scanners.go)
	TypeGrafanaWorkspace = "aws:grafana:workspace"
	// FinSpace (finspace_scanners.go)
	TypeFinSpaceEnvironment = "aws:fin-space:environment"
	// FinSpace Managed kdb (finspace_kx_scanners.go)
	TypeFinspaceKxEnvironment  = "aws:finspace:kx-environment"
	TypeFinspaceKxCluster      = "aws:finspace:kx-cluster"
	TypeFinspaceKxDatabase     = "aws:finspace:kx-database"
	TypeFinspaceKxDataview     = "aws:finspace:kx-dataview"
	TypeFinspaceKxScalingGroup = "aws:finspace:kx-scaling-group"
	TypeFinspaceKxUser         = "aws:finspace:kx-user"
	TypeFinspaceKxVolume       = "aws:finspace:kx-volume"
	// EVS (evs_scanners.go)
	TypeEVSEnvironment = "aws:evs:environment"
	// EMRServerless (emrserverless_scanners.go)
	TypeEMRServerlessApplication = "aws:emr-serverless:application"
	// ElementalInference (elementalinference_scanners.go)
	TypeElementalInferenceFeed = "aws:elemental-inference:feed"
	// DSQL (dsql_scanners.go)
	TypeDSQLCluster = "aws:dsql:cluster"
	TypeDSQLStream  = "aws:dsql:stream"
	// DocDBElastic (docdbelastic_scanners.go)
	TypeDocDBElasticCluster         = "aws:doc-db-elastic:cluster"
	TypeDocDBElasticClusterSnapshot = "aws:doc-db-elastic:cluster-snapshot"
	// DRS / Elastic Disaster Recovery (drs_scanners.go). The "-resource" suffix
	// mirrors the AWS Service Reference resource-type names (SourceServerResource,
	// …); DRS has no CloudFormation twin to mirror without it.
	TypeDRSSourceServerResource                     = "aws:drs:source-server-resource"
	TypeDRSRecoveryInstanceResource                 = "aws:drs:recovery-instance-resource"
	TypeDRSSourceNetworkResource                    = "aws:drs:source-network-resource"
	TypeDRSReplicationConfigurationTemplateResource = "aws:drs:replication-configuration-template-resource"
	TypeDRSLaunchConfigurationTemplateResource      = "aws:drs:launch-configuration-template-resource"
	// DLM (dlm_scanners.go)
	TypeDLMLifecyclePolicy = "aws:dlm:lifecycle-policy"
	// CUR (cur_scanners.go)
	TypeCURReportDefinition = "aws:cur:report-definition"
	// ControlTower extras
	TypeControlTowerEnabledControl = "aws:controltower:enabled-control"
	// ConnectCampaignsV2 (connectcampaignsv2_scanners.go)
	TypeConnectCampaignsV2Campaign = "aws:connect-campaigns-v2:campaign"
	// ConnectCampaigns (connectcampaigns_scanners.go)
	TypeConnectCampaignsCampaign = "aws:connect-campaigns:campaign"
	// CodeStarNotifications (codestarnotifications_scanners.go)
	TypeCodeStarNotificationsNotificationRule = "aws:codestar-notifications:notification-rule"
	// CodeGuruReviewer (codegurureviewer_scanners.go)
	TypeCodeGuruReviewerRepositoryAssociation = "aws:code-guru-reviewer:repository-association"
	// CodeGuruProfiler (codeguruprofiler_scanners.go)
	TypeCodeGuruProfilerProfilingGroup = "aws:code-guru-profiler:profiling-group"
	// CodeCommit (codecommit_scanners.go)
	TypeCodeCommitRepository = "aws:codecommit:repository"
	// CustomerProfiles (customerprofiles_scanners.go)
	TypeCPDomain                        = "aws:customer-profiles:domain"
	TypeCPCalculatedAttributeDefinition = "aws:customer-profiles:calculated-attribute-definition"
	TypeCPEventStream                   = "aws:customer-profiles:event-stream"
	TypeCPEventTrigger                  = "aws:customer-profiles:event-trigger"
	TypeCPIntegration                   = "aws:customer-profiles:integration"
	TypeCPObjectType                    = "aws:customer-profiles:object-type"
	TypeCPRecommender                   = "aws:customer-profiles:recommender"
	TypeCPSegmentDefinition             = "aws:customer-profiles:segment-definition"
	// Per-domain children that exist only in the Service Reference catalog
	// (no CloudFormation twin), spelled plural — disco mirrors the plural per
	// the type-naming rule; aliased to the exact SR keys in aws_coverage.go.
	TypeCustomerProfilesLayouts            = "aws:customer-profiles:layouts"
	TypeCustomerProfilesDomainObjectTypes  = "aws:customer-profiles:domain-object-types"
	TypeCustomerProfilesRecommenderFilters = "aws:customer-profiles:recommender-filters"
	TypeCustomerProfilesRecommenderSchemas = "aws:customer-profiles:recommender-schemas"
	// CleanRooms (cleanrooms_scanners.go)
	TypeCleanRoomsAnalysisTemplate                   = "aws:cleanrooms:analysis-template"
	TypeCleanRoomsCollaboration                      = "aws:cleanrooms:collaboration"
	TypeCleanRoomsConfiguredTable                    = "aws:cleanrooms:configured-table"
	TypeCleanRoomsConfiguredTableAssociation         = "aws:cleanrooms:configured-table-association"
	TypeCleanRoomsConfiguredAudienceModelAssociation = "aws:cleanrooms:configured-audience-model-association"
	TypeCleanRoomsIDMappingTable                     = "aws:cleanrooms:id-mapping-table"
	TypeCleanRoomsIDNamespaceAssociation             = "aws:cleanrooms:id-namespace-association"
	TypeCleanRoomsMembership                         = "aws:cleanrooms:membership"
	TypeCleanRoomsPrivacyBudgetTemplate              = "aws:cleanrooms:privacy-budget-template"
	// CloudDirectory (clouddirectory_scanners.go)
	TypeCloudDirectoryDirectory         = "aws:clouddirectory:directory"
	TypeCloudDirectoryDevelopmentSchema = "aws:clouddirectory:development-schema"
	TypeCloudDirectoryPublishedSchema   = "aws:clouddirectory:published-schema"
	TypeCloudDirectoryAppliedSchema     = "aws:clouddirectory:applied-schema"
	// AppConfig (appconfig_scanners.go)
	TypeAppConfigApplication                = "aws:appconfig:application"
	TypeAppConfigConfigurationProfile       = "aws:appconfig:configuration-profile"
	TypeAppConfigDeployment                 = "aws:appconfig:deployment"
	TypeAppConfigDeploymentStrategy         = "aws:appconfig:deployment-strategy"
	TypeAppConfigEnvironment                = "aws:appconfig:environment"
	TypeAppConfigExtension                  = "aws:appconfig:extension"
	TypeAppConfigExtensionAssociation       = "aws:appconfig:extension-association"
	TypeAppConfigHostedConfigurationVersion = "aws:appconfig:hosted-configuration-version"
	// AppFabric (appfabric_scanners.go, appfabric_resolvers.go)
	TypeAppFabricAppBundle            = "aws:appfabric:app-bundle"
	TypeAppFabricAppAuthorization     = "aws:appfabric:app-authorization"
	TypeAppFabricIngestion            = "aws:appfabric:ingestion"
	TypeAppFabricIngestionDestination = "aws:appfabric:ingestion-destination"
	// SMSVoice v2 (smsvoice_scanners.go)
	TypeSMSVoiceConfigurationSet          = "aws:sms-voice:configuration-set"
	TypeSMSVoiceOptOutList                = "aws:sms-voice:opt-out-list"
	TypeSMSVoicePhoneNumber               = "aws:sms-voice:phone-number"
	TypeSMSVoicePool                      = "aws:sms-voice:pool"
	TypeSMSVoiceProtectConfiguration      = "aws:sms-voice:protect-configuration"
	TypeSMSVoiceSenderID                  = "aws:sms-voice:sender-id"
	TypeSMSVoiceRegistration              = "aws:sms-voice:registration"
	TypeSMSVoiceRegistrationAttachment    = "aws:sms-voice:registration-attachment"
	TypeSMSVoiceVerifiedDestinationNumber = "aws:sms-voice:verified-destination-number"
	// Route53GlobalResolver (route53globalresolver_scanners.go)
	TypeR53GRAccessSource          = "aws:route53globalresolver:access-source"
	TypeR53GRAccessToken           = "aws:route53globalresolver:access-token"
	TypeR53GRDNSView               = "aws:route53globalresolver:dns-view"
	TypeR53GRFirewallDomainList    = "aws:route53globalresolver:firewall-domain-list"
	TypeR53GRFirewallRule          = "aws:route53globalresolver:firewall-rule"
	TypeR53GRGlobalResolver        = "aws:route53globalresolver:global-resolver"
	TypeR53GRHostedZoneAssociation = "aws:route53globalresolver:hosted-zone-association"
	// Notifications (notifications_scanners.go)
	TypeNotificationsChannelAssociation                        = "aws:notifications:channel-association"
	TypeNotificationsEventRule                                 = "aws:notifications:event-rule"
	TypeNotificationsManagedNotificationAdditionalChannelAssoc = "aws:notifications:managed-notification-additional-channel-association"
	TypeNotificationsNotificationConfiguration                 = "aws:notifications:notification-configuration"
	TypeNotificationsNotificationHub                           = "aws:notifications:notification-hub"
	TypeNotificationsOrganizationalUnitAssociation             = "aws:notifications:organizational-unit-association"
	TypeNotificationsManagedNotificationConfiguration          = "aws:notifications:managed-notification-configuration"
	// Location (location_scanners.go)
	TypeLocationAPIKey             = "aws:location:api-key"
	TypeLocationGeofenceCollection = "aws:location:geofence-collection"
	TypeLocationMap                = "aws:location:map"
	TypeLocationPlaceIndex         = "aws:location:place-index"
	TypeLocationRouteCalculator    = "aws:location:route-calculator"
	TypeLocationTracker            = "aws:location:tracker"
	TypeLocationTrackerConsumer    = "aws:location:tracker-consumer"
	// DirectConnect (directconnect_scanners.go)
	TypeDirectConnectConnection                      = "aws:directconnect:connection"
	TypeDirectConnectDirectConnectGateway            = "aws:directconnect:direct-connect-gateway"
	TypeDirectConnectDirectConnectGatewayAssociation = "aws:directconnect:direct-connect-gateway-association"
	TypeDirectConnectLag                             = "aws:directconnect:lag"
	TypeDirectConnectPrivateVirtualInterface         = "aws:directconnect:private-virtual-interface"
	TypeDirectConnectPublicVirtualInterface          = "aws:directconnect:public-virtual-interface"
	TypeDirectConnectTransitVirtualInterface         = "aws:directconnect:transit-virtual-interface"
	// IoTFleetWise (iotfleetwise_scanners.go)
	TypeIoTFWCampaign        = "aws:iotfleetwise:campaign"
	TypeIoTFWDecoderManifest = "aws:iotfleetwise:decoder-manifest"
	TypeIoTFWFleet           = "aws:iotfleetwise:fleet"
	TypeIoTFWModelManifest   = "aws:iotfleetwise:model-manifest"
	TypeIoTFWSignalCatalog   = "aws:iotfleetwise:signal-catalog"
	TypeIoTFWStateTemplate   = "aws:iotfleetwise:state-template"
	TypeIoTFWVehicle         = "aws:iotfleetwise:vehicle"
	// IoTManagedIntegrations (iotmanagedintegrations_scanners.go)
	TypeIoTManagedIntegrationsAccountAssociation  = "aws:iotmanagedintegrations:account-association"
	TypeIoTManagedIntegrationsCredentialLocker    = "aws:iotmanagedintegrations:credential-locker"
	TypeIoTManagedIntegrationsManagedThing        = "aws:iotmanagedintegrations:managed-thing"
	TypeIoTManagedIntegrationsOtaTask             = "aws:iotmanagedintegrations:ota-task"
	TypeIoTManagedIntegrationsProvisioningProfile = "aws:iotmanagedintegrations:provisioning-profile"
	// FraudDetector (frauddetector_scanners.go)
	TypeFraudDetectorDetector      = "aws:frauddetector:detector"
	TypeFraudDetectorEntityType    = "aws:frauddetector:entity-type"
	TypeFraudDetectorEventType     = "aws:frauddetector:event-type"
	TypeFraudDetectorLabel         = "aws:frauddetector:label"
	TypeFraudDetectorList          = "aws:frauddetector:list"
	TypeFraudDetectorOutcome       = "aws:frauddetector:outcome"
	TypeFraudDetectorVariable      = "aws:frauddetector:variable"
	TypeFraudDetectorModel         = "aws:frauddetector:model"
	TypeFraudDetectorExternalModel = "aws:frauddetector:external-model"
	TypeFraudDetectorRule          = "aws:frauddetector:rule"
	// IoT SiteWise (iotsitewise_scanners.go)
	TypeIoTSWAccessPolicy     = "aws:iotsitewise:access-policy"
	TypeIoTSWAsset            = "aws:iotsitewise:asset"
	TypeIoTSWAssetModel       = "aws:iotsitewise:asset-model"
	TypeIoTSWComputationModel = "aws:iotsitewise:computation-model"
	TypeIoTSWDashboard        = "aws:iotsitewise:dashboard"
	TypeIoTSWDataset          = "aws:iotsitewise:dataset"
	TypeIoTSWGateway          = "aws:iotsitewise:gateway"
	TypeIoTSWPortal           = "aws:iotsitewise:portal"
	TypeIoTSWProject          = "aws:iotsitewise:project"
	// Detective (detective_scanners.go, detective_resolvers.go)
	TypeDetectiveGraph  = "aws:detective:graph"
	TypeDetectiveMember = "aws:detective:member"
	// Lake Formation (lakeformation_scanners.go, lakeformation_resolvers.go)
	TypeLakeFormationResource = "aws:lakeformation:resource"
	// SES v2 (ses_scanners.go, ses_resolvers.go)
	TypeSESEmailIdentity    = "aws:ses:email-identity"
	TypeSESConfigurationSet = "aws:ses:configuration-set"
	// SES v2 — extended (ses_v2_extended_scanners.go)
	TypeSESConfigurationSetEventDestination = "aws:ses:configuration-set-event-destination"
	TypeSESContactList                      = "aws:ses:contact-list"
	TypeSESCustomVerificationEmailTemplate  = "aws:ses:custom-verification-email-template"
	TypeSESDedicatedIPPool                  = "aws:ses:dedicated-ip-pool"
	TypeSESMultiRegionEndpoint              = "aws:ses:multi-region-endpoint"
	TypeSESTemplate                         = "aws:ses:template"
	TypeSESTenant                           = "aws:ses:tenant"
	TypeSESVdmAttributes                    = "aws:ses:vdm-attributes"
	// SES v1 — Receipt family (ses_receipt_scanners.go)
	TypeSESReceiptFilter  = "aws:ses:receipt-filter"
	TypeSESReceiptRule    = "aws:ses:receipt-rule"
	TypeSESReceiptRuleSet = "aws:ses:receipt-rule-set"
	// SES — MailManager family (ses_mailmanager_scanners.go)
	TypeSESMailManagerAddonInstance     = "aws:ses:mailmanager-addon-instance"
	TypeSESMailManagerAddonSubscription = "aws:ses:mailmanager-addon-subscription"
	TypeSESMailManagerAddressList       = "aws:ses:mailmanager-address-list"
	TypeSESMailManagerArchive           = "aws:ses:mailmanager-archive"
	TypeSESMailManagerIngressPoint      = "aws:ses:mailmanager-ingress-point"
	TypeSESMailManagerRelay             = "aws:ses:mailmanager-relay"
	TypeSESMailManagerRuleSet           = "aws:ses:mailmanager-rule-set"
	TypeSESMailManagerTrafficPolicy     = "aws:ses:mailmanager-traffic-policy"
	// Pinpoint — Core (pinpoint_scanners.go)
	TypePinpointApp                 = "aws:pinpoint:app"
	TypePinpointApplicationSettings = "aws:pinpoint:application-settings"
	TypePinpointEventStream         = "aws:pinpoint:event-stream"
	TypePinpointCampaign            = "aws:pinpoint:campaign"
	TypePinpointSegment             = "aws:pinpoint:segment"
	// Pinpoint — Channels (pinpoint_channels_scanners.go)
	TypePinpointADMChannel             = "aws:pinpoint:adm-channel"
	TypePinpointAPNSChannel            = "aws:pinpoint:apns-channel"
	TypePinpointAPNSSandboxChannel     = "aws:pinpoint:apns-sandbox-channel"
	TypePinpointAPNSVoipChannel        = "aws:pinpoint:apns-voip-channel"
	TypePinpointAPNSVoipSandboxChannel = "aws:pinpoint:apns-voip-sandbox-channel"
	TypePinpointBaiduChannel           = "aws:pinpoint:baidu-channel"
	TypePinpointEmailChannel           = "aws:pinpoint:email-channel"
	TypePinpointGCMChannel             = "aws:pinpoint:gcm-channel"
	TypePinpointSMSChannel             = "aws:pinpoint:sms-channel"
	TypePinpointVoiceChannel           = "aws:pinpoint:voice-channel"
	// Pinpoint — Templates (pinpoint_templates_scanners.go)
	TypePinpointEmailTemplate = "aws:pinpoint:email-template"
	TypePinpointInAppTemplate = "aws:pinpoint:in-app-template"
	TypePinpointPushTemplate  = "aws:pinpoint:push-template"
	TypePinpointSmsTemplate   = "aws:pinpoint:sms-template"
	// DataPipeline (datapipeline_scanners.go)
	TypeDataPipelinePipeline = "aws:datapipeline:pipeline"
	// DataExchange (dataexchange_scanners.go)
	TypeDataExchangeDataSets     = "aws:dataexchange:data-sets"
	TypeDataExchangeDataGrants   = "aws:dataexchange:data-grants"
	TypeDataExchangeEventActions = "aws:dataexchange:event-actions"
	// DataZone (datazone_scanners.go)
	TypeDataZoneDomain                            = "aws:datazone:domain"
	TypeDataZoneDomainUnit                        = "aws:datazone:domain-unit"
	TypeDataZoneProject                           = "aws:datazone:project"
	TypeDataZoneProjectProfile                    = "aws:datazone:project-profile"
	TypeDataZoneProjectMembership                 = "aws:datazone:project-membership"
	TypeDataZoneGroupProfile                      = "aws:datazone:group-profile"
	TypeDataZoneUserProfile                       = "aws:datazone:user-profile"
	TypeDataZoneEnvironment                       = "aws:datazone:environment"
	TypeDataZoneEnvironmentProfile                = "aws:datazone:environment-profile"
	TypeDataZoneEnvironmentActions                = "aws:datazone:environment-actions"
	TypeDataZoneEnvironmentBlueprintConfiguration = "aws:datazone:environment-blueprint-configuration"
	TypeDataZoneDataSource                        = "aws:datazone:data-source"
	TypeDataZoneConnection                        = "aws:datazone:connection"
	TypeDataZoneSubscriptionTarget                = "aws:datazone:subscription-target"
	// NetworkManager (networkmanager_scanners.go) — global service hosted in us-west-2
	TypeNetworkManagerGlobalNetwork                      = "aws:networkmanager:global-network"
	TypeNetworkManagerCoreNetwork                        = "aws:networkmanager:core-network"
	TypeNetworkManagerSite                               = "aws:networkmanager:site"
	TypeNetworkManagerDevice                             = "aws:networkmanager:device"
	TypeNetworkManagerLink                               = "aws:networkmanager:link"
	TypeNetworkManagerLinkAssociation                    = "aws:networkmanager:link-association"
	TypeNetworkManagerCustomerGatewayAssociation         = "aws:networkmanager:customer-gateway-association"
	TypeNetworkManagerTransitGatewayRegistration         = "aws:networkmanager:transit-gateway-registration"
	TypeNetworkManagerVpcAttachment                      = "aws:networkmanager:vpc-attachment"
	TypeNetworkManagerConnectAttachment                  = "aws:networkmanager:connect-attachment"
	TypeNetworkManagerSiteToSiteVpnAttachment            = "aws:networkmanager:site-to-site-vpn-attachment"
	TypeNetworkManagerDirectConnectGatewayAttachment     = "aws:networkmanager:direct-connect-gateway-attachment"
	TypeNetworkManagerTransitGatewayRouteTableAttachment = "aws:networkmanager:transit-gateway-route-table-attachment"
	TypeNetworkManagerTransitGatewayPeering              = "aws:networkmanager:transit-gateway-peering"
	TypeNetworkManagerConnectPeer                        = "aws:networkmanager:connect-peer"
	TypeNetworkManagerCoreNetworkPrefixListAssociation   = "aws:networkmanager:core-network-prefix-list-association"
	TypeNetworkManagerConnection                         = "aws:networkmanager:connection"
	// Network Flow Monitor (networkflowmonitor_scanners.go)
	TypeNetworkFlowMonitorMonitor = "aws:networkflowmonitor:monitor"
	TypeNetworkFlowMonitorScope   = "aws:networkflowmonitor:scope"
	// CloudWatch Network Monitor (networkmonitor_scanners.go)
	TypeNetworkMonitorMonitor = "aws:networkmonitor:monitor"
	TypeNetworkMonitorProbe   = "aws:networkmonitor:probe"
	// Greengrass v1 (greengrass_scanners.go) — deprecated by AWS but still has CFN types
	TypeGreengrassConnectorDefinition           = "aws:greengrass:connector-definition"
	TypeGreengrassConnectorDefinitionVersion    = "aws:greengrass:connector-definition-version"
	TypeGreengrassCoreDefinition                = "aws:greengrass:core-definition"
	TypeGreengrassCoreDefinitionVersion         = "aws:greengrass:core-definition-version"
	TypeGreengrassDeviceDefinition              = "aws:greengrass:device-definition"
	TypeGreengrassDeviceDefinitionVersion       = "aws:greengrass:device-definition-version"
	TypeGreengrassFunctionDefinition            = "aws:greengrass:function-definition"
	TypeGreengrassFunctionDefinitionVersion     = "aws:greengrass:function-definition-version"
	TypeGreengrassLoggerDefinition              = "aws:greengrass:logger-definition"
	TypeGreengrassLoggerDefinitionVersion       = "aws:greengrass:logger-definition-version"
	TypeGreengrassResourceDefinition            = "aws:greengrass:resource-definition"
	TypeGreengrassResourceDefinitionVersion     = "aws:greengrass:resource-definition-version"
	TypeGreengrassSubscriptionDefinition        = "aws:greengrass:subscription-definition"
	TypeGreengrassSubscriptionDefinitionVersion = "aws:greengrass:subscription-definition-version"
	TypeGreengrassGroup                         = "aws:greengrass:group"
	TypeGreengrassGroupVersion                  = "aws:greengrass:group-version"
	// BedrockAgentCore (bedrockagentcore_scanners.go)
	TypeBedrockAgentCoreAPIKeyCredentialProvider  = "aws:bedrockagentcore:api-key-credential-provider"
	TypeBedrockAgentCoreBrowser                   = "aws:bedrockagentcore:browser"
	TypeBedrockAgentCoreBrowserCustom             = "aws:bedrockagentcore:browser-custom"
	TypeBedrockAgentCoreBrowserProfile            = "aws:bedrockagentcore:browser-profile"
	TypeBedrockAgentCoreCodeInterpreter           = "aws:bedrockagentcore:code-interpreter"
	TypeBedrockAgentCoreCodeInterpreterCustom     = "aws:bedrockagentcore:code-interpreter-custom"
	TypeBedrockAgentCoreConfigurationBundle       = "aws:bedrockagentcore:configuration-bundle"
	TypeBedrockAgentCoreDataset                   = "aws:bedrockagentcore:dataset"
	TypeBedrockAgentCoreEvaluator                 = "aws:bedrockagentcore:evaluator"
	TypeBedrockAgentCoreHarness                   = "aws:bedrockagentcore:harness"
	TypeBedrockAgentCoreHarnessEndpoint           = "aws:bedrockagentcore:harness-endpoint"
	TypeBedrockAgentCorePolicyGeneration          = "aws:bedrockagentcore:policy-generation"
	TypeBedrockAgentCoreRegistry                  = "aws:bedrockagentcore:registry"
	TypeBedrockAgentCoreRegistryRecord            = "aws:bedrockagentcore:registry-record"
	TypeBedrockAgentCoreGateway                   = "aws:bedrockagentcore:gateway"
	TypeBedrockAgentCoreGatewayTarget             = "aws:bedrockagentcore:gateway-target"
	TypeBedrockAgentCoreMemory                    = "aws:bedrockagentcore:memory"
	TypeBedrockAgentCoreOAuth2CredentialProvider  = "aws:bedrockagentcore:oauth2-credential-provider"
	TypeBedrockAgentCoreOnlineEvaluationConfig    = "aws:bedrockagentcore:online-evaluation-config"
	TypeBedrockAgentCorePaymentManager            = "aws:bedrockagentcore:payment-manager"
	TypeBedrockAgentCorePaymentConnector          = "aws:bedrockagentcore:payment-connector"
	TypeBedrockAgentCorePaymentCredentialProvider = "aws:bedrockagentcore:payment-credential-provider"
	TypeBedrockAgentCorePolicy                    = "aws:bedrockagentcore:policy"
	TypeBedrockAgentCorePolicyEngine              = "aws:bedrockagentcore:policy-engine"
	TypeBedrockAgentCoreRuntime                   = "aws:bedrockagentcore:runtime"
	TypeBedrockAgentCoreRuntimeEndpoint           = "aws:bedrockagentcore:runtime-endpoint"
	TypeBedrockAgentCoreWorkloadIdentity          = "aws:bedrockagentcore:workload-identity"
	// VpcLattice (vpclattice_scanners.go)
	TypeVpcLatticeService                           = "aws:vpclattice:service"
	TypeVpcLatticeServiceNetwork                    = "aws:vpclattice:service-network"
	TypeVpcLatticeListener                          = "aws:vpclattice:listener"
	TypeVpcLatticeRule                              = "aws:vpclattice:rule"
	TypeVpcLatticeTargetGroup                       = "aws:vpclattice:target-group"
	TypeVpcLatticeAccessLogSubscription             = "aws:vpclattice:access-log-subscription"
	TypeVpcLatticeAuthPolicy                        = "aws:vpclattice:auth-policy"
	TypeVpcLatticeResourcePolicy                    = "aws:vpclattice:resource-policy"
	TypeVpcLatticeDomainVerification                = "aws:vpclattice:domain-verification"
	TypeVpcLatticeResourceConfiguration             = "aws:vpclattice:resource-configuration"
	TypeVpcLatticeResourceGateway                   = "aws:vpclattice:resource-gateway"
	TypeVpcLatticeServiceNetworkResourceAssociation = "aws:vpclattice:service-network-resource-association"
	TypeVpcLatticeServiceNetworkServiceAssociation  = "aws:vpclattice:service-network-service-association"
	TypeVpcLatticeServiceNetworkVpcAssociation      = "aws:vpclattice:service-network-vpc-association"
	TypeVpcLatticeResourceEndpointAssociation       = "aws:vpclattice:resource-endpoint-association"
	// Inspector v2 (inspector_scanners.go, inspector_resolvers.go)
	TypeInspector2Filter                        = "aws:inspector2:filter"
	TypeInspector2Member                        = "aws:inspector2:member"
	TypeInspector2CisScanConfiguration          = "aws:inspector2:cis-scan-configuration"
	TypeInspector2CodeSecurityIntegration       = "aws:inspector2:code-security-integration"
	TypeInspector2CodeSecurityScanConfiguration = "aws:inspector2:code-security-scan-configuration"
	// Glue Data Catalog (glue_scanners.go, glue_resolvers.go)
	TypeGlueDatabase       = "aws:glue:database"
	TypeGlueTable          = "aws:glue:table"
	TypeGluePartition      = "aws:glue:partition"
	TypeGlueTableOptimizer = "aws:glue:table-optimizer"
	// Bedrock — Agents family (bedrock_agents_scanners.go)
	TypeBedrockAgent         = "aws:bedrock:agent"
	TypeBedrockAgentAlias    = "aws:bedrock:agent-alias"
	TypeBedrockKnowledgeBase = "aws:bedrock:knowledge-base"
	TypeBedrockDataSource    = "aws:bedrock:data-source"
	TypeBedrockFlow          = "aws:bedrock:flow"
	TypeBedrockFlowAlias     = "aws:bedrock:flow-alias"
	TypeBedrockFlowVersion   = "aws:bedrock:flow-version"
	TypeBedrockPrompt        = "aws:bedrock:prompt"
	TypeBedrockPromptVersion = "aws:bedrock:prompt-version"
	// Bedrock — Foundation family (bedrock_foundation_scanners.go)
	TypeBedrockGuardrail                       = "aws:bedrock:guardrail"
	TypeBedrockGuardrailVersion                = "aws:bedrock:guardrail-version"
	TypeBedrockAutomatedReasoningPolicy        = "aws:bedrock:automated-reasoning-policy"
	TypeBedrockAutomatedReasoningPolicyVersion = "aws:bedrock:automated-reasoning-policy-version"
	TypeBedrockIntelligentPromptRouter         = "aws:bedrock:intelligent-prompt-router"
	TypeBedrockApplicationInferenceProfile     = "aws:bedrock:application-inference-profile"
	TypeBedrockEnforcedGuardrailConfiguration  = "aws:bedrock:enforced-guardrail-configuration"
	// Bedrock — Catalogs (bedrock_foundation_scanners.go)
	TypeBedrockFoundationModel  = "aws:bedrock:foundation-model"
	TypeBedrockInferenceProfile = "aws:bedrock:inference-profile"
	// Bedrock — Data Automation (bedrock_dataautomation_scanners.go)
	TypeBedrockBlueprint             = "aws:bedrock:blueprint"
	TypeBedrockDataAutomationProject = "aws:bedrock:data-automation-project"
	TypeBedrockDataAutomationLibrary = "aws:bedrock:data-automation-library"
	// Bedrock — Models (bedrock_models_scanners.go)
	TypeBedrockCustomModel              = "aws:bedrock:custom-model"
	TypeBedrockImportedModel            = "aws:bedrock:imported-model"
	TypeBedrockProvisionedModel         = "aws:bedrock:provisioned-model"
	TypeBedrockCustomModelDeployment    = "aws:bedrock:custom-model-deployment"
	TypeBedrockMarketplaceModelEndpoint = "aws:bedrock:bedrock-marketplace-model-endpoint"
	// Glue — Schema (glue_schema_scanners.go)
	TypeGlueRegistry              = "aws:glue:registry"
	TypeGlueSchema                = "aws:glue:schema"
	TypeGlueSchemaVersion         = "aws:glue:schema-version"
	TypeGlueSchemaVersionMetadata = "aws:glue:schema-version-metadata"
	// Glue — Catalog family (glue_catalog_scanners.go)
	TypeGlueCrawler    = "aws:glue:crawler"
	TypeGlueConnection = "aws:glue:connection"
	TypeGlueClassifier = "aws:glue:classifier"
	// Glue — Misc family (glue_misc_scanners.go)
	TypeGlueCatalog                       = "aws:glue:catalog"
	TypeGlueCustomEntityType              = "aws:glue:custom-entity-type"
	TypeGlueDataCatalogEncryptionSettings = "aws:glue:data-catalog-encryption-settings"
	TypeGlueDataQualityRuleset            = "aws:glue:data-quality-ruleset"
	TypeGlueIdentityCenterConfiguration   = "aws:glue:identity-center-configuration"
	TypeGlueIntegration                   = "aws:glue:integration"
	TypeGlueIntegrationResourceProperty   = "aws:glue:integration-resource-property"
	TypeGlueSecurityConfiguration         = "aws:glue:security-configuration"
	TypeGlueUsageProfile                  = "aws:glue:usage-profile"
	TypeGlueBlueprint                     = "aws:glue:blueprint"
	TypeGlueUserDefinedFunction           = "aws:glue:user-defined-function"
	// Glue — Jobs family (glue_jobs_scanners.go)
	TypeGlueJob         = "aws:glue:job"
	TypeGlueTrigger     = "aws:glue:trigger"
	TypeGlueWorkflow    = "aws:glue:workflow"
	TypeGlueMLTransform = "aws:glue:ml-transform"
	TypeGlueDevEndpoint = "aws:glue:dev-endpoint"
	// Athena (athena_scanners.go, athena_resolvers.go)
	TypeAthenaWorkgroup         = "aws:athena:workgroup"
	TypeAthenaDataCatalog       = "aws:athena:datacatalog"
	TypeAthenaNamedQuery        = "aws:athena:named-query"
	TypeAthenaPreparedStatement = "aws:athena:prepared-statement"
	// Redshift (redshift_scanners.go, redshift_resolvers.go)
	TypeRedshiftCluster               = "aws:redshift:cluster"
	TypeRedshiftSubnetGroup           = "aws:redshift:cluster-subnet-group"
	TypeRedshiftClusterParameterGroup = "aws:redshift:cluster-parameter-group"
	TypeRedshiftEndpointAccess        = "aws:redshift:endpoint-access"
	TypeRedshiftEndpointAuthorization = "aws:redshift:endpoint-authorization"
	TypeRedshiftEventSubscription     = "aws:redshift:event-subscription"
	TypeRedshiftIntegration           = "aws:redshift:integration"
	TypeRedshiftScheduledAction       = "aws:redshift:scheduled-action"
	// Redshift — Service-Reference-only types (no CloudFormation twin);
	// segments mirror the SR keys.
	TypeRedshiftSnapshot             = "aws:redshift:snapshot"
	TypeRedshiftSnapshotSchedule     = "aws:redshift:snapshot-schedule"
	TypeRedshiftSnapshotCopyGrant    = "aws:redshift:snapshot-copy-grant"
	TypeRedshiftUsageLimit           = "aws:redshift:usage-limit"
	TypeRedshiftHsmClientCertificate = "aws:redshift:hsm-client-certificate"
	TypeRedshiftHsmConfiguration     = "aws:redshift:hsm-configuration"
	TypeRedshiftIdcApplication       = "aws:redshift:redshift-idc-application"
	TypeRedshiftDatashare            = "aws:redshift:datashare"
	// OpenSearch (opensearch_scanners.go, opensearch_resolvers.go)
	TypeOpenSearchDomain = "aws:opensearch:domain"
	// DocumentDB (docdb_scanners.go, docdb_resolvers.go)
	TypeDocDBCluster                 = "aws:docdb:db-cluster"
	TypeDocDBInstance                = "aws:docdb:db-instance"
	TypeDocDBDBClusterParameterGroup = "aws:docdb:db-cluster-parameter-group"
	TypeDocDBEventSubscription       = "aws:docdb:event-subscription"
	TypeDocDBGlobalCluster           = "aws:docdb:global-cluster"
	// Neptune (neptune_scanners.go, neptune_resolvers.go)
	TypeNeptuneCluster                 = "aws:neptune:db-cluster"
	TypeNeptuneInstance                = "aws:neptune:db-instance"
	TypeNeptuneDBClusterParameterGroup = "aws:neptune:db-cluster-parameter-group"
	TypeNeptuneDBParameterGroup        = "aws:neptune:db-parameter-group"
	TypeNeptuneEventSubscription       = "aws:neptune:event-subscription"
	TypeNeptuneGlobalCluster           = "aws:neptune:global-cluster"
	// Service Catalog (servicecatalog_scanners.go, servicecatalog_resolvers.go)
	TypeServiceCatalogPortfolio = "aws:servicecatalog:portfolio"
	TypeServiceCatalogProduct   = "aws:servicecatalog:cloud-formation-product"
	// ServiceCatalog — extended (servicecatalog_extended_scanners.go)
	TypeServiceCatalogAcceptedPortfolioShare           = "aws:servicecatalog:accepted-portfolio-share"
	TypeServiceCatalogCloudFormationProvisionedProduct = "aws:servicecatalog:cloudformation-provisioned-product"
	TypeServiceCatalogServiceAction                    = "aws:servicecatalog:service-action"
	TypeServiceCatalogTagOption                        = "aws:servicecatalog:tag-option"
	TypeServiceCatalogPortfolioShare                   = "aws:servicecatalog:portfolio-share"
	TypeServiceCatalogPortfolioPrincipalAssociation    = "aws:servicecatalog:portfolio-principal-association"
	TypeServiceCatalogTagOptionAssociation             = "aws:servicecatalog:tag-option-association"
	TypeServiceCatalogLaunchRoleConstraint             = "aws:servicecatalog:launch-role-constraint"
	TypeServiceCatalogLaunchNotificationConstraint     = "aws:servicecatalog:launch-notification-constraint"
	TypeServiceCatalogLaunchTemplateConstraint         = "aws:servicecatalog:launch-template-constraint"
	TypeServiceCatalogResourceUpdateConstraint         = "aws:servicecatalog:resource-update-constraint"
	TypeServiceCatalogStackSetConstraint               = "aws:servicecatalog:stack-set-constraint"
	TypeServiceCatalogPortfolioProductAssociation      = "aws:servicecatalog:portfolio-product-association"
	TypeServiceCatalogServiceActionAssociation         = "aws:servicecatalog:service-action-association"
	// MediaLive (medialive_scanners.go)
	TypeMediaLiveChannel                      = "aws:medialive:channel"
	TypeMediaLiveChannelPlacementGroup        = "aws:medialive:channel-placement-group"
	TypeMediaLiveCloudWatchAlarmTemplate      = "aws:medialive:cloudwatch-alarm-template"
	TypeMediaLiveCloudWatchAlarmTemplateGroup = "aws:medialive:cloudwatch-alarm-template-group"
	TypeMediaLiveCluster                      = "aws:medialive:cluster"
	TypeMediaLiveEventBridgeRuleTemplate      = "aws:medialive:eventbridge-rule-template"
	TypeMediaLiveEventBridgeRuleTemplateGroup = "aws:medialive:eventbridge-rule-template-group"
	TypeMediaLiveInput                        = "aws:medialive:input"
	TypeMediaLiveInputDevice                  = "aws:medialive:input-device"
	TypeMediaLiveInputSecurityGroup           = "aws:medialive:input-security-group"
	TypeMediaLiveNode                         = "aws:medialive:node"
	TypeMediaLiveReservation                  = "aws:medialive:reservation"
	TypeMediaLiveMultiplex                    = "aws:medialive:multiplex"
	TypeMediaLiveMultiplexProgram             = "aws:medialive:multiplexprogram"
	TypeMediaLiveNetwork                      = "aws:medialive:network"
	TypeMediaLiveSdiSource                    = "aws:medialive:sdi-source"
	TypeMediaLiveSignalMap                    = "aws:medialive:signal-map"
	// DataSync (datasync_scanners.go)
	TypeDataSyncAgent                 = "aws:datasync:agent"
	TypeDataSyncTask                  = "aws:datasync:task"
	TypeDataSyncLocationEFS           = "aws:datasync:location-efs"
	TypeDataSyncLocationNFS           = "aws:datasync:location-nfs"
	TypeDataSyncLocationSMB           = "aws:datasync:location-smb"
	TypeDataSyncLocationS3            = "aws:datasync:location-s3"
	TypeDataSyncLocationHDFS          = "aws:datasync:location-hdfs"
	TypeDataSyncLocationAzureBlob     = "aws:datasync:location-azure-blob"
	TypeDataSyncLocationObjectStorage = "aws:datasync:location-object-storage"
	TypeDataSyncLocationFSxLustre     = "aws:datasync:location-fsx-lustre"
	TypeDataSyncLocationFSxONTAP      = "aws:datasync:location-fsx-ontap"
	TypeDataSyncLocationFSxOpenZFS    = "aws:datasync:location-fsx-openzfs"
	TypeDataSyncLocationFSxWindows    = "aws:datasync:location-fsx-windows"
	// Audit Manager (auditmanager_scanners.go, auditmanager_resolvers.go)
	TypeAuditManagerAssessment = "aws:auditmanager:assessment"
	TypeAuditManagerFramework  = "aws:auditmanager:assessment-framework"
	TypeAuditManagerControl    = "aws:auditmanager:control"
	// Control Tower (controltower_scanners.go, controltower_resolvers.go)
	TypeControlTowerLandingZone     = "aws:controltower:landing-zone"
	TypeControlTowerEnabledBaseline = "aws:controltower:enabled-baseline"
	// App Runner (apprunner_scanners.go, apprunner_resolvers.go)
	TypeAppRunnerService                    = "aws:apprunner:service"
	TypeAppRunnerVPCConnector               = "aws:apprunner:vpc-connector"
	TypeAppRunnerAutoScalingConfiguration   = "aws:apprunner:auto-scaling-configuration"
	TypeAppRunnerObservabilityConfiguration = "aws:apprunner:observability-configuration"
	TypeAppRunnerVpcIngressConnection       = "aws:apprunner:vpc-ingress-connection"
	TypeAppRunnerConnection                 = "aws:apprunner:connection"
	// Batch (batch_scanners.go, batch_resolvers.go)
	TypeBatchComputeEnvironment = "aws:batch:compute-environment"
	TypeBatchJobQueue           = "aws:batch:job-queue"
	TypeBatchJobDefinition      = "aws:batch:job-definition"
	TypeBatchSchedulingPolicy   = "aws:batch:scheduling-policy"
	TypeBatchConsumableResource = "aws:batch:consumable-resource"
	TypeBatchServiceEnvironment = "aws:batch:service-environment"
	TypeBatchQuotaShare         = "aws:batch:quota-share"
	// Lightsail (lightsail_scanners.go)
	TypeLightsailInstance         = "aws:lightsail:instance"
	TypeLightsailDatabase         = "aws:lightsail:database"
	TypeLightsailContainerService = "aws:lightsail:container"
	// Lightsail — extended (lightsail_extended_scanners.go)
	TypeLightsailAlarm                      = "aws:lightsail:alarm"
	TypeLightsailBucket                     = "aws:lightsail:bucket"
	TypeLightsailCertificate                = "aws:lightsail:certificate"
	TypeLightsailDatabaseSnapshot           = "aws:lightsail:database-snapshot"
	TypeLightsailDisk                       = "aws:lightsail:disk"
	TypeLightsailDiskSnapshot               = "aws:lightsail:disk-snapshot"
	TypeLightsailDistribution               = "aws:lightsail:distribution"
	TypeLightsailDomain                     = "aws:lightsail:domain"
	TypeLightsailInstanceSnapshot           = "aws:lightsail:instance-snapshot"
	TypeLightsailLoadBalancer               = "aws:lightsail:load-balancer"
	TypeLightsailLoadBalancerTLSCertificate = "aws:lightsail:load-balancer-tls-certificate"
	TypeLightsailStaticIP                   = "aws:lightsail:static-ip"
	TypeLightsailKeyPair                    = "aws:lightsail:key-pair"
	TypeLightsailContactMethod              = "aws:lightsail:contact-method"
	// Elastic Beanstalk (elasticbeanstalk_scanners.go, elasticbeanstalk_resolvers.go)
	TypeBeanstalkApplication        = "aws:elasticbeanstalk:application"
	TypeBeanstalkEnvironment        = "aws:elasticbeanstalk:environment"
	TypeBeanstalkApplicationVersion = "aws:elasticbeanstalk:application-version"
	TypeBeanstalkPlatform           = "aws:elasticbeanstalk:platform"
	// IAM Access Analyzer (accessanalyzer_scanners.go, accessanalyzer_resolvers.go)
	TypeAccessAnalyzerAnalyzer    = "aws:accessanalyzer:analyzer"
	TypeAccessAnalyzerArchiveRule = "aws:accessanalyzer:archive-rule"
	// AI DevOps agent (aidevops_scanners.go, aidevops_resolvers.go). Resource
	// segments mirror the Service Reference catalog (the only catalog modelling
	// agent-space / service / associations; CFN models only PrivateConnection).
	TypeAidevopsAgentSpace        = "aws:aidevops:agentspace"
	TypeAidevopsService           = "aws:aidevops:service"
	TypeAidevopsAssociations      = "aws:aidevops:associations"
	TypeAidevopsPrivateConnection = "aws:aidevops:private-connection"
	// ACM Private CA permissions (acmpca_scanners.go, acmpca_resolvers.go)
	TypeACMPCAPermission = "aws:acm-pca:permission"
	// CloudWatch AIOps investigation groups (aiops_scanners.go, aiops_resolvers.go)
	TypeAIOpsInvestigationGroup = "aws:aiops:investigation-group"
	// Amazon MQ (mq_scanners.go, mq_resolvers.go)
	TypeMQBroker                   = "aws:mq:broker"
	TypeMQConfiguration            = "aws:mq:configuration"
	TypeMQConfigurationAssociation = "aws:mq:configuration-association"
	// Amplify (amplify_scanners.go, amplify_resolvers.go)
	TypeAmplifyApp    = "aws:amplify:app"
	TypeAmplifyBranch = "aws:amplify:branch"
	TypeAmplifyDomain = "aws:amplify:domain"
	// Resource segment is plural to mirror the Service Reference catalog
	// (AWS::amplify::webhooks); CFN models no standalone Amplify webhook type.
	TypeAmplifyWebhooks = "aws:amplify:webhooks"
	// API Gateway v2 — VPC Link (apigateway_v2_scanners.go); separate from
	// the v1 TypeAPIGatewayVpcLink which targets a different SDK module
	// (apigateway, not apigatewayv2).
	TypeAPIGatewayV2VpcLink = "aws:apigatewayv2:vpc-link"
	// AppFlow (appflow_scanners.go, appflow_resolvers.go)
	// Application Auto Scaling (applicationautoscaling_scanners.go)
	TypeApplicationAutoScalingScalableTarget = "aws:application-autoscaling:scalable-target"
	TypeApplicationAutoScalingScalingPolicy  = "aws:application-autoscaling:scaling-policy"
	TypeAppFlowFlow                          = "aws:appflow:flow"
	TypeAppFlowConnector                     = "aws:appflow:connector"
	TypeAppFlowConnectorProfile              = "aws:appflow:connector-profile"
	// AppIntegrations (appintegrations_scanners.go, appintegrations_resolvers.go)
	TypeAppIntegrationsApplication      = "aws:appintegrations:application"
	TypeAppIntegrationsDataIntegration  = "aws:appintegrations:data-integration"
	TypeAppIntegrationsEventIntegration = "aws:appintegrations:event-integration"
	// CloudWatch Application Insights (applicationinsights_scanners.go, applicationinsights_resolvers.go)
	TypeApplicationInsightsApplication = "aws:applicationinsights:application"
	// CloudWatch Application Signals (applicationsignals_scanners.go, applicationsignals_resolvers.go)
	TypeApplicationSignalsSLO                   = "aws:applicationsignals:service-level-objective"
	TypeApplicationSignalsGroupingConfiguration = "aws:applicationsignals:grouping-configuration"
	// Amazon Managed Prometheus / APS (aps_scanners.go, aps_resolvers.go); SDK module is `amp`.
	TypeAPSWorkspace = "aws:aps:workspace"
	TypeAPSScraper   = "aws:aps:scraper"
	// AppMesh (appmesh_scanners.go).
	TypeAppMeshMesh           = "aws:appmesh:mesh"
	TypeAppMeshGatewayRoute   = "aws:appmesh:gateway-route"
	TypeAppMeshRoute          = "aws:appmesh:route"
	TypeAppMeshVirtualGateway = "aws:appmesh:virtual-gateway"
	TypeAppMeshVirtualNode    = "aws:appmesh:virtual-node"
	TypeAppMeshVirtualRouter  = "aws:appmesh:virtual-router"
	TypeAppMeshVirtualService = "aws:appmesh:virtual-service"
	// GlobalAccelerator (globalaccelerator_scanners.go). Global service
	// callable only via us-west-2.
	TypeGlobalAcceleratorAccelerator            = "aws:global-accelerator:accelerator"
	TypeGlobalAcceleratorCrossAccountAttachment = "aws:global-accelerator:cross-account-attachment"
	TypeGlobalAcceleratorEndpointGroup          = "aws:global-accelerator:endpoint-group"
	TypeGlobalAcceleratorListener               = "aws:global-accelerator:listener"
	// B2BI (b2bi_scanners.go).
	TypeB2BICapability  = "aws:b2bi:capability"
	TypeB2BIPartnership = "aws:b2bi:partnership"
	TypeB2BIProfile     = "aws:b2bi:profile"
	TypeB2BITransformer = "aws:b2bi:transformer"
	// WorkSpaces (workspaces_scanners.go).
	TypeWorkSpacesConnectionAlias = "aws:work-spaces:connection-alias"
	TypeWorkSpacesWorkspace       = "aws:work-spaces:workspace"
	TypeWorkSpacesWorkspacesPool  = "aws:work-spaces:workspaces-pool"
	// directory-id mirrors the Service Reference resource key "directoryid"
	// (a registered WorkSpaces directory); the kebab form's algorithmic key
	// concatenates back to it, so no alias is needed.
	TypeWorkSpacesDirectory            = "aws:work-spaces:directory-id"
	TypeWorkSpacesWorkspaceBundle      = "aws:work-spaces:workspace-bundle"
	TypeWorkSpacesWorkspaceImage       = "aws:work-spaces:workspace-image"
	TypeWorkSpacesWorkspaceIPGroup     = "aws:work-spaces:workspace-ip-group"
	TypeWorkSpacesWorkspaceApplication = "aws:work-spaces:workspace-application"
	// S3Vectors (s3vectors_scanners.go).
	TypeS3VectorsIndex              = "aws:s3vectors:index"
	TypeS3VectorsVectorBucket       = "aws:s3vectors:vector-bucket"
	TypeS3VectorsVectorBucketPolicy = "aws:s3vectors:vector-bucket-policy"
	// S3Express (s3express_scanners.go).
	TypeS3ExpressAccessPoint     = "aws:s3express:access-point"
	TypeS3ExpressBucketPolicy    = "aws:s3express:bucket-policy"
	TypeS3ExpressDirectoryBucket = "aws:s3express:directory-bucket"
	// ResourceExplorer2 (resourceexplorer2_scanners.go).
	TypeResourceExplorer2DefaultViewAssociation = "aws:resource-explorer-2:default-view-association"
	TypeResourceExplorer2Index                  = "aws:resource-explorer-2:index"
	TypeResourceExplorer2View                   = "aws:resource-explorer-2:view"
	TypeResourceExplorer2ManagedView            = "aws:resource-explorer-2:managed-view"
	// PCS (pcs_scanners.go). AWS Parallel Computing Service.
	TypePCSCluster          = "aws:pcs:cluster"
	TypePCSComputeNodeGroup = "aws:pcs:compute-node-group"
	TypePCSQueue            = "aws:pcs:queue"
	// M2 (m2_scanners.go). Mainframe Modernization.
	TypeM2Application = "aws:m2:application"
	TypeM2Deployment  = "aws:m2:deployment"
	TypeM2Environment = "aws:m2:environment"
	// ManagedBlockchain (managedblockchain_scanners.go).
	TypeManagedBlockchainAccessor = "aws:managed-blockchain:accessor"
	TypeManagedBlockchainMember   = "aws:managed-blockchain:member"
	TypeManagedBlockchainNetwork  = "aws:managed-blockchain:network"
	TypeManagedBlockchainNode     = "aws:managed-blockchain:node"
	TypeManagedBlockchainProposal = "aws:managed-blockchain:proposal"
	// MediaConvert (mediaconvert_scanners.go).
	TypeMediaConvertJobTemplate = "aws:media-convert:job-template"
	TypeMediaConvertPreset      = "aws:media-convert:preset"
	TypeMediaConvertQueue       = "aws:media-convert:queue"
	// NeptuneGraph (neptunegraph_scanners.go).
	TypeNeptuneGraphGraph                = "aws:neptune-graph:graph"
	TypeNeptuneGraphGraphSnapshot        = "aws:neptune-graph:graph-snapshot"
	TypeNeptuneGraphPrivateGraphEndpoint = "aws:neptune-graph:private-graph-endpoint"
	// Proton (proton_scanners.go).
	TypeProtonComponent                    = "aws:proton:component"
	TypeProtonDeployment                   = "aws:proton:deployment"
	TypeProtonEnvironment                  = "aws:proton:environment"
	TypeProtonEnvironmentAccountConnection = "aws:proton:environment-account-connection"
	TypeProtonEnvironmentTemplate          = "aws:proton:environment-template"
	TypeProtonEnvironmentTemplateVersion   = "aws:proton:environment-template-version"
	TypeProtonRepository                   = "aws:proton:repository"
	TypeProtonService                      = "aws:proton:service"
	TypeProtonServiceInstance              = "aws:proton:service-instance"
	TypeProtonServiceTemplate              = "aws:proton:service-template"
	TypeProtonServiceTemplateVersion       = "aws:proton:service-template-version"
	// RolesAnywhere (rolesanywhere_scanners.go).
	TypeRolesAnywhereCRL         = "aws:roles-anywhere:crl"
	TypeRolesAnywhereProfile     = "aws:roles-anywhere:profile"
	TypeRolesAnywhereTrustAnchor = "aws:roles-anywhere:trust-anchor"
	TypeRolesAnywhereSubject     = "aws:roles-anywhere:subject"
	// RedshiftServerless (redshiftserverless_scanners.go).
	TypeRedshiftServerlessNamespace        = "aws:redshift-serverless:namespace"
	TypeRedshiftServerlessSnapshot         = "aws:redshift-serverless:snapshot"
	TypeRedshiftServerlessWorkgroup        = "aws:redshift-serverless:workgroup"
	TypeRedshiftServerlessEndpointAccess   = "aws:redshift-serverless:endpoint-access"
	TypeRedshiftServerlessRecoveryPoint    = "aws:redshift-serverless:recovery-point"
	TypeRedshiftServerlessManagedWorkgroup = "aws:redshift-serverless:managed-workgroup"
	// Rekognition (rekognition_scanners.go).
	TypeRekognitionCollection      = "aws:rekognition:collection"
	TypeRekognitionProject         = "aws:rekognition:project"
	TypeRekognitionStreamProcessor = "aws:rekognition:stream-processor"
	TypeRekognitionProjectVersion  = "aws:rekognition:project-version"
	TypeRekognitionDataset         = "aws:rekognition:dataset"
	// Repostspace (repostspace_scanners.go). AWS re:Post Private.
	TypeRepostspaceSpace = "aws:repostspace:space"
	// Route53Profiles (route53profiles_scanners.go).
	TypeRoute53ProfilesProfile                    = "aws:route53-profiles:profile"
	TypeRoute53ProfilesProfileAssociation         = "aws:route53-profiles:profile-association"
	TypeRoute53ProfilesProfileResourceAssociation = "aws:route53-profiles:profile-resource-association"
	// SupportApp (supportapp_scanners.go). Global service callable via us-east-1.
	TypeSupportAppAccountAlias                = "aws:support-app:account-alias"
	TypeSupportAppSlackChannelConfiguration   = "aws:support-app:slack-channel-configuration"
	TypeSupportAppSlackWorkspaceConfiguration = "aws:support-app:slack-workspace-configuration"
	// WorkspacesInstances (workspacesinstances_scanners.go).
	TypeWorkspacesInstancesWorkspaceInstance = "aws:workspaces-instances:workspace-instance"
	// CodeBuild (codebuild_scanners.go).
	TypeCodeBuildFleet            = "aws:code-build:fleet"
	TypeCodeBuildProject          = "aws:code-build:project"
	TypeCodeBuildReportGroup      = "aws:code-build:report-group"
	TypeCodeBuildSourceCredential = "aws:code-build:source-credential"
	// DevOpsAgent (devopsagent_scanners.go).
	TypeDevOpsAgentAgentSpace  = "aws:dev-ops-agent:agent-space"
	TypeDevOpsAgentAssociation = "aws:dev-ops-agent:association"
	TypeDevOpsAgentService     = "aws:dev-ops-agent:service"
	// EventSchemas (eventschemas_scanners.go); SDK module is "schemas".
	TypeEventSchemasDiscoverer     = "aws:event-schemas:discoverer"
	TypeEventSchemasRegistry       = "aws:event-schemas:registry"
	TypeEventSchemasRegistryPolicy = "aws:event-schemas:registry-policy"
	TypeEventSchemasSchema         = "aws:event-schemas:schema"
	// GroundStation (groundstation_scanners.go).
	TypeGroundStationConfig                = "aws:ground-station:config"
	TypeGroundStationDataflowEndpointGroup = "aws:ground-station:dataflow-endpoint-group"
	TypeGroundStationMissionProfile        = "aws:ground-station:mission-profile"
	// FMS (fms_scanners.go). Firewall Manager. Global service callable via us-east-1.
	TypeFMSNotificationChannel = "aws:fms:notification-channel"
	TypeFMSPolicy              = "aws:fms:policy"
	TypeFMSResourceSet         = "aws:fms:resource-set"
	TypeFMSAppsList            = "aws:fms:applications-list"
	TypeFMSProtocolsList       = "aws:fms:protocols-list"
	// KafkaConnect (kafkaconnect_scanners.go).
	TypeKafkaConnectConnector           = "aws:kafka-connect:connector"
	TypeKafkaConnectCustomPlugin        = "aws:kafka-connect:custom-plugin"
	TypeKafkaConnectWorkerConfiguration = "aws:kafka-connect:worker-configuration"
	// Kendra (kendra_scanners.go).
	TypeKendraAccessControlConfiguration = "aws:kendra:access-control-configuration"
	TypeKendraDataSource                 = "aws:kendra:data-source"
	TypeKendraExperience                 = "aws:kendra:experience"
	TypeKendraFaq                        = "aws:kendra:faq"
	TypeKendraFeaturedResultsSet         = "aws:kendra:featured-results-set"
	TypeKendraIndex                      = "aws:kendra:index"
	TypeKendraQuerySuggestionsBlockList  = "aws:kendra:query-suggestions-block-list"
	TypeKendraThesaurus                  = "aws:kendra:thesaurus"
	// KinesisAnalyticsV2 (kinesisanalyticsv2_scanners.go).
	TypeKAV2Application                 = "aws:kinesis-analytics-v2:application"
	TypeKAV2ApplicationCloudWatchLogOpt = "aws:kinesis-analytics-v2:application-cloud-watch-logging-option"
	TypeKAV2ApplicationOutput           = "aws:kinesis-analytics-v2:application-output"
	TypeKAV2ApplicationReferenceData    = "aws:kinesis-analytics-v2:application-reference-data-source"
	// Lex (lex_scanners.go); SDK module is lexmodelsv2.
	TypeLexBot            = "aws:lex:bot"
	TypeLexBotAlias       = "aws:lex:bot-alias"
	TypeLexBotVersion     = "aws:lex:bot-version"
	TypeLexResourcePolicy = "aws:lex:resource-policy"
	TypeLexTestSet        = "aws:lex:test-set"
	// Personalize (personalize_scanners.go).
	TypePersonalizeDataset           = "aws:personalize:dataset"
	TypePersonalizeDatasetGroup      = "aws:personalize:dataset-group"
	TypePersonalizeSchema            = "aws:personalize:schema"
	TypePersonalizeSolution          = "aws:personalize:solution"
	TypePersonalizeCampaign          = "aws:personalize:campaign"
	TypePersonalizeEventTracker      = "aws:personalize:event-tracker"
	TypePersonalizeFilter            = "aws:personalize:filter"
	TypePersonalizeMetricAttribution = "aws:personalize:metric-attribution"
	TypePersonalizeRecommender       = "aws:personalize:recommender"
	TypePersonalizeRecipe            = "aws:personalize:recipe"
	// Polly (polly_scanners.go).
	TypePollyLexicon = "aws:polly:lexicon"
	// RefactorSpaces (refactorspaces_scanners.go); SDK module is
	// migrationhubrefactorspaces, CFN segment is "RefactorSpaces".
	TypeRefactorSpacesApplication = "aws:refactor-spaces:application"
	TypeRefactorSpacesEnvironment = "aws:refactor-spaces:environment"
	TypeRefactorSpacesRoute       = "aws:refactor-spaces:route"
	TypeRefactorSpacesService     = "aws:refactor-spaces:service"
	// Route53RecoveryControl (route53recoverycontrol_scanners.go).
	TypeR53RCCluster        = "aws:route53-recovery-control:cluster"
	TypeR53RCControlPanel   = "aws:route53-recovery-control:control-panel"
	TypeR53RCRoutingControl = "aws:route53-recovery-control:routing-control"
	TypeR53RCSafetyRule     = "aws:route53-recovery-control:safety-rule"
	// Route53RecoveryReadiness (route53recoveryreadiness_scanners.go).
	TypeR53RRCell           = "aws:route53-recovery-readiness:cell"
	TypeR53RRReadinessCheck = "aws:route53-recovery-readiness:readiness-check"
	TypeR53RRRecoveryGroup  = "aws:route53-recovery-readiness:recovery-group"
	TypeR53RRResourceSet    = "aws:route53-recovery-readiness:resource-set"
	// S3Files (s3files_scanners.go).
	TypeS3FilesAccessPoint      = "aws:s3files:access-point"
	TypeS3FilesFileSystem       = "aws:s3files:file-system"
	TypeS3FilesFileSystemPolicy = "aws:s3files:file-system-policy"
	TypeS3FilesMountTarget      = "aws:s3files:mount-target"
	// S3Outposts (s3outposts_scanners.go).
	TypeS3OutpostsEndpoint     = "aws:s3outposts:endpoint"
	TypeS3OutpostsBucket       = "aws:s3outposts:bucket"
	TypeS3OutpostsAccessPoint  = "aws:s3outposts:access-point"
	TypeS3OutpostsBucketPolicy = "aws:s3outposts:bucket-policy"
	// SecurityAgent (securityagent_scanners.go).
	TypeSecurityAgentAgentSpace              = "aws:security-agent:agent-space"
	TypeSecurityAgentApplication             = "aws:security-agent:application"
	TypeSecurityAgentPentest                 = "aws:security-agent:pentest"
	TypeSecurityAgentTargetDomain            = "aws:security-agent:target-domain"
	TypeSecurityAgentIntegration             = "aws:security-agent:integration"
	TypeSecurityAgentPrivateConnection       = "aws:security-agent:private-connection"
	TypeSecurityAgentSecurityRequirementPack = "aws:security-agent:security-requirement-pack"
	// SecurityLake (securitylake_scanners.go).
	TypeSecurityLakeAwsLogSource = "aws:security-lake:aws-log-source"
	TypeSecurityLakeDataLake     = "aws:security-lake:data-lake"
	TypeSecurityLakeSubscriber   = "aws:security-lake:subscriber"
	// ServiceCatalogAppRegistry (servicecatalogappregistry_scanners.go).
	TypeSCARApplication               = "aws:service-catalog-app-registry:application"
	TypeSCARAttributeGroup            = "aws:service-catalog-app-registry:attribute-group"
	TypeSCARAttributeGroupAssociation = "aws:service-catalog-app-registry:attribute-group-association"
	TypeSCARResourceAssociation       = "aws:service-catalog-app-registry:resource-association"
	// SSMContacts (ssmcontacts_scanners.go).
	TypeSSMContactsContact        = "aws:ssm-contacts:contact"
	TypeSSMContactsContactChannel = "aws:ssm-contacts:contact-channel"
	TypeSSMContactsPlan           = "aws:ssm-contacts:plan"
	TypeSSMContactsRotation       = "aws:ssm-contacts:rotation"
	// VerifiedPermissions (verifiedpermissions_scanners.go).
	TypeVerifiedPermissionsIdentitySource   = "aws:verifiedpermissions:identity-source"
	TypeVerifiedPermissionsPolicy           = "aws:verifiedpermissions:policy"
	TypeVerifiedPermissionsPolicyStore      = "aws:verifiedpermissions:policy-store"
	TypeVerifiedPermissionsPolicyTemplate   = "aws:verifiedpermissions:policy-template"
	TypeVerifiedPermissionsPolicyStoreAlias = "aws:verifiedpermissions:policy-store-alias"
	// XRay (xray_scanners.go).
	TypeXRayGroup                   = "aws:xray:group"
	TypeXRayResourcePolicy          = "aws:xray:resource-policy"
	TypeXRaySamplingRule            = "aws:xray:sampling-rule"
	TypeXRayTransactionSearchConfig = "aws:xray:transaction-search-config"
	// WellArchitected (wellarchitected_scanners.go).
	TypeWellArchitectedWorkload       = "aws:wellarchitected:workload"
	TypeWellArchitectedLens           = "aws:wellarchitected:lens"
	TypeWellArchitectedProfile        = "aws:wellarchitected:profile"
	TypeWellArchitectedReviewTemplate = "aws:wellarchitected:review-template"
	// WorkMail (workmail_scanners.go).
	TypeWorkMailOrganization = "aws:workmail:organization"
	// Cases (Connect Cases) (cases_scanners.go); SDK module is connectcases,
	// CFN segment is "Cases".
	TypeCasesCaseRule = "aws:cases:case-rule"
	TypeCasesDomain   = "aws:cases:domain"
	TypeCasesField    = "aws:cases:field"
	TypeCasesLayout   = "aws:cases:layout"
	TypeCasesTemplate = "aws:cases:template"
	// EntityResolution (entityresolution_scanners.go).
	TypeEntityResolutionIDMappingWorkflow = "aws:entityresolution:id-mapping-workflow"
	TypeEntityResolutionIDNamespace       = "aws:entityresolution:id-namespace"
	TypeEntityResolutionMatchingWorkflow  = "aws:entityresolution:matching-workflow"
	TypeEntityResolutionPolicyStatement   = "aws:entityresolution:policy-statement"
	TypeEntityResolutionSchemaMapping     = "aws:entityresolution:schema-mapping"
	// IoTTwinMaker (iottwinmaker_scanners.go).
	TypeIoTTwinMakerComponentType = "aws:iottwinmaker:component-type"
	TypeIoTTwinMakerEntity        = "aws:iottwinmaker:entity"
	TypeIoTTwinMakerScene         = "aws:iottwinmaker:scene"
	TypeIoTTwinMakerSyncJob       = "aws:iottwinmaker:sync-job"
	TypeIoTTwinMakerWorkspace     = "aws:iottwinmaker:workspace"
	// MediaPackage (mediapackage_scanners.go); spans mediapackage (v1)
	// + mediapackagevod SDKs.
	TypeMediaPackageAsset                  = "aws:mediapackage:asset"
	TypeMediaPackageChannel                = "aws:mediapackage:channel"
	TypeMediaPackageOriginEndpoint         = "aws:mediapackage:origin-endpoint"
	TypeMediaPackagePackagingConfiguration = "aws:mediapackage:packaging-configuration"
	TypeMediaPackagePackagingGroup         = "aws:mediapackage:packaging-group"
	// MediaPackageV2 (mediapackagev2_scanners.go).
	TypeMediaPackageV2Channel              = "aws:mediapackagev2:channel"
	TypeMediaPackageV2ChannelGroup         = "aws:mediapackagev2:channel-group"
	TypeMediaPackageV2ChannelPolicy        = "aws:mediapackagev2:channel-policy"
	TypeMediaPackageV2OriginEndpoint       = "aws:mediapackagev2:origin-endpoint"
	TypeMediaPackageV2OriginEndpointPolicy = "aws:mediapackagev2:origin-endpoint-policy"
	// ODB (odb_scanners.go). Oracle Database@AWS.
	TypeODBCloudAutonomousVMCluster   = "aws:odb:cloud-autonomous-vm-cluster"
	TypeODBCloudExadataInfrastructure = "aws:odb:cloud-exadata-infrastructure"
	TypeODBCloudVMCluster             = "aws:odb:cloud-vm-cluster"
	TypeODBOdbNetwork                 = "aws:odb:odb-network"
	TypeODBOdbPeeringConnection       = "aws:odb:odb-peering-connection"
	TypeODBAutonomousDatabase         = "aws:odb:autonomous-database"
	TypeODBAutonomousDatabaseBackup   = "aws:odb:autonomous-database-backup"
	TypeODBDbNode                     = "aws:odb:db-node"
	// Outposts (outposts_scanners.go). AWS Outposts.
	TypeOutpostsSite    = "aws:outposts:site"
	TypeOutpostsOutpost = "aws:outposts:outpost"
	// PCAConnectorAD (pcaconnectorad_scanners.go).
	TypePCAConnectorADConnector             = "aws:pca-connector-ad:connector"
	TypePCAConnectorADDirectoryRegistration = "aws:pca-connector-ad:directory-registration"
	TypePCAConnectorADServicePrincipalName  = "aws:pca-connector-ad:service-principal-name"
	TypePCAConnectorADTemplate              = "aws:pca-connector-ad:template"
	TypePCAConnectorADTemplateGroupACE      = "aws:pca-connector-ad:template-group-access-control-entry"
	// RTBFabric (rtbfabric_scanners.go). Real-time bidding fabric.
	TypeRTBFabricLink             = "aws:rtbfabric:link"
	TypeRTBFabricRequesterGateway = "aws:rtbfabric:requester-gateway"
	TypeRTBFabricResponderGateway = "aws:rtbfabric:responder-gateway"
	TypeRTBFabricLinkRoutingRule  = "aws:rtbfabric:link-routing-rule"
	// S3Tables (s3tables_scanners.go).
	TypeS3TablesNamespace         = "aws:s3tables:namespace"
	TypeS3TablesTable             = "aws:s3tables:table"
	TypeS3TablesTableBucket       = "aws:s3tables:table-bucket"
	TypeS3TablesTableBucketPolicy = "aws:s3tables:table-bucket-policy"
	TypeS3TablesTablePolicy       = "aws:s3tables:table-policy"
	// ServiceDiscovery / Cloud Map (servicediscovery_scanners.go).
	TypeServiceDiscoveryHTTPNamespace       = "aws:servicediscovery:http-namespace"
	TypeServiceDiscoveryPrivateDNSNamespace = "aws:servicediscovery:private-dns-namespace"
	TypeServiceDiscoveryPublicDNSNamespace  = "aws:servicediscovery:public-dns-namespace"
	TypeServiceDiscoveryService             = "aws:servicediscovery:service"
	TypeServiceDiscoveryInstance            = "aws:servicediscovery:instance"
	// Timestream (timestream_scanners.go); spans timestreamwrite,
	// timestreamquery, and timestreaminfluxdb SDKs.
	TypeTimestreamDatabase         = "aws:timestream:database"
	TypeTimestreamInfluxDBCluster  = "aws:timestream:influx-db-cluster"
	TypeTimestreamInfluxDBInstance = "aws:timestream:influx-db-instance"
	TypeTimestreamScheduledQuery   = "aws:timestream:scheduled-query"
	TypeTimestreamTable            = "aws:timestream:table"
	// DB parameter group has no CloudFormation twin (only InfluxDBCluster /
	// InfluxDBInstance are CFN-modeled), so it carries the Service Reference's
	// own "timestream-influxdb" service segment to match the SR key directly
	// (db-cluster / db-instance collapse to the influx-db-* types via Skips()).
	TypeTimestreamInfluxDBParameterGroup = "aws:timestream-influxdb:db-parameter-group"
	// DataBrew (databrew_scanners.go).
	TypeDataBrewDataset  = "aws:databrew:dataset"
	TypeDataBrewJob      = "aws:databrew:job"
	TypeDataBrewProject  = "aws:databrew:project"
	TypeDataBrewRecipe   = "aws:databrew:recipe"
	TypeDataBrewRuleset  = "aws:databrew:ruleset"
	TypeDataBrewSchedule = "aws:databrew:schedule"
	// FSx (fsx_scanners.go).
	TypeFSxFileSystem                = "aws:fsx:file-system"
	TypeFSxDataRepositoryAssociation = "aws:fsx:data-repository-association"
	TypeFSxSnapshot                  = "aws:fsx:snapshot"
	TypeFSxStorageVirtualMachine     = "aws:fsx:storage-virtual-machine"
	TypeFSxVolume                    = "aws:fsx:volume"
	TypeFSxS3AccessPointAttachment   = "aws:fsx:s3-access-point-attachment"
	TypeFSxBackup                    = "aws:fsx:backup"
	TypeFSxFileCache                 = "aws:fsx:file-cache"
	// LakeFormation (lakeformation_scanners.go).
	TypeLakeFormationDataCellsFilter      = "aws:lakeformation:data-cells-filter"
	TypeLakeFormationDataLakeSettings     = "aws:lakeformation:data-lake-settings"
	TypeLakeFormationPrincipalPermissions = "aws:lakeformation:principal-permissions"
	TypeLakeFormationTag                  = "aws:lakeformation:tag"
	// MediaTailor (mediatailor_scanners.go).
	TypeMediaTailorChannel               = "aws:mediatailor:channel"
	TypeMediaTailorChannelPolicy         = "aws:mediatailor:channel-policy"
	TypeMediaTailorLiveSource            = "aws:mediatailor:live-source"
	TypeMediaTailorPlaybackConfiguration = "aws:mediatailor:playback-configuration"
	TypeMediaTailorPrefetchSchedule      = "aws:mediatailor:prefetch-schedule"
	TypeMediaTailorProgram               = "aws:mediatailor:program"
	TypeMediaTailorSourceLocation        = "aws:mediatailor:source-location"
	TypeMediaTailorVodSource             = "aws:mediatailor:vod-source"
	// MemoryDB (memorydb_scanners.go).
	TypeMemoryDBACL                       = "aws:memorydb:acl"
	TypeMemoryDBCluster                   = "aws:memorydb:cluster"
	TypeMemoryDBMultiRegionCluster        = "aws:memorydb:multi-region-cluster"
	TypeMemoryDBMultiRegionParameterGroup = "aws:memorydb:multi-region-parameter-group"
	TypeMemoryDBParameterGroup            = "aws:memorydb:parameter-group"
	TypeMemoryDBReservedNode              = "aws:memorydb:reserved-node"
	TypeMemoryDBSnapshot                  = "aws:memorydb:snapshot"
	TypeMemoryDBSubnetGroup               = "aws:memorydb:subnet-group"
	TypeMemoryDBUser                      = "aws:memorydb:user"
	// ObservabilityAdmin (observabilityadmin_scanners.go). Disco service segment
	// "observabilityadmin"; CFN segment "ObservabilityAdmin".
	TypeObservabilityAdminOrganizationCentralizationRule = "aws:observabilityadmin:organization-centralization-rule"
	TypeObservabilityAdminOrganizationTelemetryRule      = "aws:observabilityadmin:organization-telemetry-rule"
	TypeObservabilityAdminS3TableIntegration             = "aws:observabilityadmin:s3-table-integration"
	TypeObservabilityAdminTelemetryEnrichment            = "aws:observabilityadmin:telemetry-enrichment"
	TypeObservabilityAdminTelemetryPipelines             = "aws:observabilityadmin:telemetry-pipelines"
	TypeObservabilityAdminTelemetryRule                  = "aws:observabilityadmin:telemetry-rule"
	// ARC Region Switch (arcregionswitch_scanners.go, arcregionswitch_resolvers.go).
	TypeARCRegionSwitchPlan = "aws:arc-region-switch:plan"
	// ARC Zonal Shift (arczonalshift_scanners.go, arczonalshift_resolvers.go).
	TypeARCZonalShiftObserverStatus = "aws:arc-zonal-shift:autoshift-observer-notification-status"
	TypeARCZonalShiftConfiguration  = "aws:arc-zonal-shift:zonal-autoshift-configuration"
	// Athena capacity reservations (athena_scanners.go).
	TypeAthenaCapacityReservation = "aws:athena:capacity-reservation"
	// EC2 Auto Scaling (autoscaling_scanners.go, autoscaling_resolvers.go).
	TypeAutoScalingGroup               = "aws:autoscaling:auto-scaling-group"
	TypeAutoScalingLaunchConfiguration = "aws:autoscaling:launch-configuration"
	TypeAutoScalingLifecycleHook       = "aws:autoscaling:lifecycle-hook"
	TypeAutoScalingScalingPolicy       = "aws:autoscaling:scaling-policy"
	TypeAutoScalingScheduledAction     = "aws:autoscaling:scheduled-action"
	TypeAutoScalingWarmPool            = "aws:autoscaling:warm-pool"
	// AWS Auto Scaling (a.k.a. AutoScalingPlans). Disco service segment
	// "autoscaling-plans"; CFN segment "AutoScalingPlans".
	TypeAutoScalingPlansScalingPlan = "aws:autoscaling-plans:scaling-plan"

	// Application Migration Service (mgn_scanners.go). Service Reference spells
	// each resource with a "Resource" suffix (SourceServerResource); disco drops
	// it per the type-naming rule (canonResource collapses the SR twin).
	TypeMGNSourceServer                     = "aws:mgn:source-server"
	TypeMGNApplication                      = "aws:mgn:application"
	TypeMGNWave                             = "aws:mgn:wave"
	TypeMGNConnector                        = "aws:mgn:connector"
	TypeMGNLaunchConfigurationTemplate      = "aws:mgn:launch-configuration-template"
	TypeMGNReplicationConfigurationTemplate = "aws:mgn:replication-configuration-template"
	TypeMGNVcenterClient                    = "aws:mgn:vcenter-client"
	TypeMGNNetworkMigrationDefinition       = "aws:mgn:network-migration-definition"

	// Migration Hub (migrationhub_scanners.go). SDK service "migrationhub",
	// Service Reference service "mgh".
	TypeMigrationHubProgressUpdateStream = "aws:migrationhub:progress-update-stream"

	// Migration Hub Orchestrator (migrationhuborchestrator_scanners.go).
	TypeMigrationHubOrchestratorWorkflow = "aws:migrationhub-orchestrator:workflow"
	TypeMigrationHubOrchestratorTemplate = "aws:migrationhub-orchestrator:template"

	// Storage Gateway (storagegateway_scanners.go, storagegateway_resolvers.go).
	TypeStorageGatewayGateway       = "aws:storagegateway:gateway"
	TypeStorageGatewayVolume        = "aws:storagegateway:volume"
	TypeStorageGatewayShare         = "aws:storagegateway:share"
	TypeStorageGatewayTape          = "aws:storagegateway:tape"
	TypeStorageGatewayTapePool      = "aws:storagegateway:tapepool"
	TypeStorageGatewayFsAssociation = "aws:storagegateway:fs-association"
	TypeStorageGatewayCacheReport   = "aws:storagegateway:cache-report"
	TypeStorageGatewayDevice        = "aws:storagegateway:device"

	// Savings Plans (savingsplans_scanners.go). Global service.
	TypeSavingsPlansSavingsPlan = "aws:savingsplans:savingsplan"

	// Simple Workflow Service (swf_scanners.go).
	TypeSWFDomain = "aws:swf:domain"

	// Serverless Application Repository (serverlessrepo_scanners.go). The Service
	// Reference key is plural (AWS::serverlessrepo::applications), so the disco
	// resource segment mirrors it as plural.
	TypeServerlessRepoApplication = "aws:serverlessrepo:applications"

	// AWS Supply Chain (supplychain_scanners.go, supplychain_resolvers.go). The
	// disco service segment "scn" mirrors the IAM/Service-Reference service key;
	// the SDK module is "supplychain".
	TypeSupplyChainInstance            = "aws:scn:instance"
	TypeSupplyChainDataIntegrationFlow = "aws:scn:data-integration-flow"
	TypeSupplyChainDataset             = "aws:scn:dataset"
	TypeSupplyChainNamespace           = "aws:scn:namespace"

	// Security Incident Response (securityir_scanners.go). The disco service
	// segment mirrors the hyphenated Service Reference key "security-ir".
	TypeSecurityIRCase       = "aws:security-ir:case"
	TypeSecurityIRMembership = "aws:security-ir:membership"

	// Snow Device Management (snowdevicemanagement_scanners.go). The disco
	// service segment mirrors the hyphenated Service Reference key.
	TypeSnowDeviceManagementManagedDevice = "aws:snow-device-management:managed-device"
	TypeSnowDeviceManagementTask          = "aws:snow-device-management:task"

	// End User Messaging Social / WhatsApp (socialmessaging_scanners.go,
	// socialmessaging_resolvers.go). The disco service segment mirrors the
	// hyphenated Service Reference key "social-messaging".
	TypeSocialMessagingWaba          = "aws:social-messaging:waba"
	TypeSocialMessagingPhoneNumberID = "aws:social-messaging:phone-number-id"

	// Textract (textract_scanners.go, textract_resolvers.go).
	TypeTextractAdapter        = "aws:textract:adapter"
	TypeTextractAdapterVersion = "aws:textract:adapter-version"

	// WorkSpaces Thin Client (thinclient_scanners.go, thinclient_resolvers.go).
	// The disco service segment "thinclient" mirrors the IAM/Service-Reference
	// service key; the SDK module is "workspacesthinclient".
	TypeThinClientDevice      = "aws:thinclient:device"
	TypeThinClientEnvironment = "aws:thinclient:environment"
	TypeThinClientSoftwareSet = "aws:thinclient:softwareset"

	// Telco Network Builder (tnb_scanners.go, tnb_resolvers.go). All resource
	// segments are hyphenated, so each carries a Service Reference alias.
	TypeTnbFunctionInstance = "aws:tnb:function-instance"
	TypeTnbFunctionPackage  = "aws:tnb:function-package"
	TypeTnbNetworkInstance  = "aws:tnb:network-instance"
	TypeTnbNetworkPackage   = "aws:tnb:network-package"
	TypeTnbNetworkOperation = "aws:tnb:network-operation"

	// Transcribe (transcribe_scanners.go). These resources are addressed by
	// name (no AWS-issued ARN), so NativeIDs are synthesized.
	TypeTranscribeCallAnalyticsCategory = "aws:transcribe:call-analytics-category"
	TypeTranscribeLanguageModel         = "aws:transcribe:language-model"
	TypeTranscribeVocabulary            = "aws:transcribe:vocabulary"
	TypeTranscribeVocabularyFilter      = "aws:transcribe:vocabulary-filter"
	TypeTranscribeMedicalVocabulary     = "aws:transcribe:medical-vocabulary"

	// Translate (translate_scanners.go). parallel-data is hyphenated under the
	// single-word "translate" service, so it carries a Service Reference alias.
	TypeTranslateParallelData = "aws:translate:parallel-data"
	TypeTranslateTerminology  = "aws:translate:terminology"

	// Trusted Advisor (trustedadvisor_scanners.go). The Service Reference key is
	// plural ("checks"), mirrored as the plural resource segment. Checks are an
	// AWS-published catalog (ManagedByProvider).
	TypeTrustedAdvisorChecks = "aws:trustedadvisor:checks"
)

Resource type constants for every AWS resource type this provider discovers. Constants prevent typos in scanner and resolver files — a mismatched string would create an orphan resource with an undeclared type.

Functions

func CollectEmits

func CollectEmits() []coverage.TypeDecl

CollectEmits returns the deduped union of every emits decl registered across the AWS package. Consumed by the coverage.Provider impl.

Types

type EdgeDecl

type EdgeDecl struct {
	Source string // disco type emitting the edge (the resolver's source iteration type)
	Target string // disco type the edge points at
	Kind   string // store.Rel* constant — "attached-to", "uses", "routes-to", etc.
}

EdgeDecl declares one (source disco type, target disco type, edge kind) triple a resolver emits. Optional, but resolvers that declare their edges let `disco coverage` and the aws-resolver-audit tool reason about resolver coverage without observing actual DB edges (which require both endpoints to be scanned in the current account).

func CollectResolverEdges

func CollectResolverEdges() []EdgeDecl

CollectResolverEdges returns every EdgeDecl declared by every registered resolver, deduplicated on (source, target, kind). Order is stable for diff-friendly output.

type ResolverInfo

type ResolverInfo struct {
	Name      string
	EdgeCount int
	Services  []string
}

ResolverInfo summarises one registered resolver for coverage tooling: unqualified function name, count of declared EdgeDecls, and the distinct disco service segments touched by those edges (Source+Target combined). EdgeCount==0 marks an unannotated resolver — either a deliberate no-op (sidecar populator, audit-stub) or a sweep target not yet annotated. cmd-side tooling consumes Services for the `disco coverage resolvers --services` filter.

func ListResolvers

func ListResolvers() []ResolverInfo

ListResolvers returns one ResolverInfo per registered resolver in registration order. Used by `disco coverage resolvers` to discover unannotated registrations.

type Scanner

type Scanner struct {
	// contains filtered or unexported fields
}

Scanner implements providers.Scanner for AWS.

func (*Scanner) LongDescription

func (s *Scanner) LongDescription() string

LongDescription is the help text for `disco scan aws --help`.

func (*Scanner) Name

func (s *Scanner) Name() string

Name implements providers.Scanner.

func (*Scanner) RegionNames

func (s *Scanner) RegionNames() []string

RegionNames implements providers.RegionNamer. Returns a clone so callers can't mutate the package-level list. The region list itself is the SDK-free source of truth in the awsregions leaf package.

func (*Scanner) Scan

func (s *Scanner) Scan(ctx context.Context, st *store.Store, scanID string) error

Scan discovers all AWS resources across all configured accounts and regions. Errors are reported via st.ReportError and never abort the scan: a failure in one service / resolver / account does not stop the others.

func (*Scanner) ServiceFilterExample

func (s *Scanner) ServiceFilterExample() string

ServiceFilterExample is the --services example shown in aws scan help.

func (*Scanner) ServiceNames

func (s *Scanner) ServiceNames() []string

ServiceNames returns the names of all services this scanner will report.

func (*Scanner) SetIncludeServiceQuotas

func (s *Scanner) SetIncludeServiceQuotas(include bool)

SetIncludeServiceQuotas adds the opt-in aws:servicequotas scanner to the default scan (--include-service-quotas). Off by default: servicequotas reads account quota limits (metadata, not resources) and is markedly slower than any resource scan, so it runs only when explicitly requested — here, or via --services aws:servicequotas.

func (*Scanner) SetProfile

func (s *Scanner) SetProfile(profile string)

SetProfile selects a named credential profile from ~/.aws/config. An empty string uses the default credential chain.

func (*Scanner) SetRegionOverride

func (s *Scanner) SetRegionOverride(regions []string)

SetRegionOverride forces all accounts to scan only the given regions, ignoring both per-account and default_regions config values.

func (*Scanner) SetRegionScope

func (s *Scanner) SetRegionScope(enabled bool)

SetRegionScope toggles SSM global-infrastructure region pre-scoping (default on via --scope-regions). When disabled, every regional service is dispatched into every enabled region as before.

func (*Scanner) SetRoleOverride

func (s *Scanner) SetRoleOverride(roleARN, externalID string)

SetRoleOverride pins the scan to a single account reached by AssumeRole against roleARN with an optional STS external_id. Bypasses the config file's accounts: section — an external orchestrator (e.g. a scan-trigger Lambda) uses this to drive a per-tenant scan without writing config to disk in the worker container.

Empty roleARN clears the override (restores config-driven account list). externalID is honoured only when roleARN is also set.

func (*Scanner) SetServiceFilter

func (s *Scanner) SetServiceFilter(services []string)

SetServiceFilter restricts the scan to the named services (e.g. "aws:ec2", "aws:iam"). An empty or nil slice scans all registered services.

func (*Scanner) SetSkipGlobals

func (s *Scanner) SetSkipGlobals(skip bool)

SetSkipGlobals suppresses every service registered with global=true. Use case: data-residency / per-region audits where global-scope reads (IAM, Route53, CloudFront, etc.) are explicitly out of scope.

func (*Scanner) SetSourceIdentity

func (s *Scanner) SetSourceIdentity(sourceIdentity string)

SetSourceIdentity opts the scan into stamping an STS SourceIdentity on every assumed-role session (CloudTrail attribution). "auto" resolves to the scan ID; any other non-empty value is used verbatim. Requires the target role's trust policy to grant sts:SetSourceIdentity, so it is off unless explicitly set.