This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::AppConfig::ConfigurationProfile
<a name="aws-resource-appconfig-configurationprofile"></a>

The `AWS::AppConfig::ConfigurationProfile` resource creates a configuration profile that enables AWS AppConfig to access the configuration source. Valid configuration sources include AWS Systems Manager (SSM) documents, SSM Parameter Store parameters, and Amazon S3. A configuration profile includes the following information.
+ The Uri location of the configuration data.
+ The AWS Identity and Access Management (IAM) role that provides access to the configuration data.
+ A validator for the configuration data. Available validators include either a JSON Schema or the Amazon Resource Name (ARN) of an AWS Lambda function.

AWS AppConfig requires that you create resources and deploy a configuration in the following order:

1. Create an application

1. Create an environment

1. Create a configuration profile

1. Choose a pre-defined deployment strategy or create your own

1. Deploy the configuration

For more information, see [AWS AppConfig](https://docs.aws.amazon.com/appconfig/latest/userguide/what-is-appconfig.html) in the *AWS AppConfig User Guide*.

## Syntax
<a name="aws-resource-appconfig-configurationprofile-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-resource-appconfig-configurationprofile-syntax.json"></a>

```
{
  "Type" : "AWS::AppConfig::ConfigurationProfile",
  "Properties" : {
      "[ApplicationId](#cfn-appconfig-configurationprofile-applicationid)" : String,
      "[DeletionProtectionCheck](#cfn-appconfig-configurationprofile-deletionprotectioncheck)" : String,
      "[Description](#cfn-appconfig-configurationprofile-description)" : String,
      "[KmsKeyIdentifier](#cfn-appconfig-configurationprofile-kmskeyidentifier)" : String,
      "[LocationUri](#cfn-appconfig-configurationprofile-locationuri)" : String,
      "[Name](#cfn-appconfig-configurationprofile-name)" : String,
      "[RetrievalRoleArn](#cfn-appconfig-configurationprofile-retrievalrolearn)" : String,
      "[Tags](#cfn-appconfig-configurationprofile-tags)" : [ Tags, ... ],
      "[Type](#cfn-appconfig-configurationprofile-type)" : String,
      "[Validators](#cfn-appconfig-configurationprofile-validators)" : [ Validators, ... ]
    }
}
```

### YAML
<a name="aws-resource-appconfig-configurationprofile-syntax.yaml"></a>

```
Type: AWS::AppConfig::ConfigurationProfile
Properties:
  [ApplicationId](#cfn-appconfig-configurationprofile-applicationid): String
  [DeletionProtectionCheck](#cfn-appconfig-configurationprofile-deletionprotectioncheck): String
  [Description](#cfn-appconfig-configurationprofile-description): String
  [KmsKeyIdentifier](#cfn-appconfig-configurationprofile-kmskeyidentifier): String
  [LocationUri](#cfn-appconfig-configurationprofile-locationuri): String
  [Name](#cfn-appconfig-configurationprofile-name): String
  [RetrievalRoleArn](#cfn-appconfig-configurationprofile-retrievalrolearn): String
  [Tags](#cfn-appconfig-configurationprofile-tags): 
    - Tags
  [Type](#cfn-appconfig-configurationprofile-type): String
  [Validators](#cfn-appconfig-configurationprofile-validators): 
    - Validators
```

## Properties
<a name="aws-resource-appconfig-configurationprofile-properties"></a>

`ApplicationId`  <a name="cfn-appconfig-configurationprofile-applicationid"></a>
The application ID.  
*Required*: Yes  
*Type*: String  
*Pattern*: `[a-z0-9]{4,7}`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`DeletionProtectionCheck`  <a name="cfn-appconfig-configurationprofile-deletionprotectioncheck"></a>
A parameter to configure deletion protection. Deletion protection prevents a user from deleting a configuration profile if your application has called either [GetLatestConfiguration](https://docs.aws.amazon.com/appconfig/2019-10-09/APIReference/API_appconfigdata_GetLatestConfiguration.html) or [GetConfiguration](https://docs.aws.amazon.com/appconfig/2019-10-09/APIReference/API_GetConfiguration.html) for the configuration profile during the specified interval.   
This parameter supports the following values:  
+ `BYPASS`: Instructs AWS AppConfig to bypass the deletion protection check and delete a configuration profile even if deletion protection would have otherwise prevented it.
+ `APPLY`: Instructs the deletion protection check to run, even if deletion protection is disabled at the account level. `APPLY` also forces the deletion protection check to run against resources created in the past hour, which are normally excluded from deletion protection checks. 
+ `ACCOUNT_DEFAULT`: The default setting, which instructs AWS AppConfig to implement the deletion protection value specified in the `UpdateAccountSettings` API.
*Required*: No  
*Type*: String  
*Allowed values*: `ACCOUNT_DEFAULT | APPLY | BYPASS`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Description`  <a name="cfn-appconfig-configurationprofile-description"></a>
A description of the configuration profile.  
*Required*: No  
*Type*: String  
*Minimum*: `0`  
*Maximum*: `1024`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`KmsKeyIdentifier`  <a name="cfn-appconfig-configurationprofile-kmskeyidentifier"></a>
The AWS Key Management Service key identifier (key ID, key alias, or key ARN) provided when the resource was created or updated.  
*Required*: No  
*Type*: String  
*Minimum*: `1`  
*Maximum*: `2048`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`LocationUri`  <a name="cfn-appconfig-configurationprofile-locationuri"></a>
A URI to locate the configuration. You can specify the following:  
+ For the AWS AppConfig hosted configuration store and for feature flags, specify `hosted`.
+ For an AWS Systems Manager Parameter Store parameter, specify either the parameter name in the format `ssm-parameter://<parameter name>` or the ARN.
+ For an AWS CodePipeline pipeline, specify the URI in the following format: `codepipeline`://<pipeline name>.
+ For an AWS Secrets Manager secret, specify the URI in the following format: `secretsmanager`://<secret name>.
+ For an Amazon S3 object, specify the URI in the following format: `s3://<bucket>/<objectKey> `. Here is an example: `s3://amzn-s3-demo-bucket/my-app/us-east-1/my-config.json`
+ For an SSM document, specify either the document name in the format `ssm-document://<document name>` or the Amazon Resource Name (ARN).
*Required*: Yes  
*Type*: String  
*Minimum*: `1`  
*Maximum*: `2048`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Name`  <a name="cfn-appconfig-configurationprofile-name"></a>
A name for the configuration profile.  
*Required*: Yes  
*Type*: String  
*Minimum*: `1`  
*Maximum*: `128`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`RetrievalRoleArn`  <a name="cfn-appconfig-configurationprofile-retrievalrolearn"></a>
The ARN of an IAM role with permission to access the configuration at the specified `LocationUri`.  
A retrieval role ARN is not required for configurations stored in AWS CodePipeline or the AWS AppConfig hosted configuration store. It is required for all other sources that store your configuration. 
*Required*: No  
*Type*: String  
*Pattern*: `^((arn):(aws|aws-cn|aws-iso|aws-iso-[a-z]{1}|aws-us-gov|aws-eusc):(iam)::\d{12}:role[/].*)$`  
*Minimum*: `20`  
*Maximum*: `2048`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Tags`  <a name="cfn-appconfig-configurationprofile-tags"></a>
Metadata to assign to the configuration profile. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.  
*Required*: No  
*Type*: [Array](aws-properties-appconfig-configurationprofile-tags.md) of [Tags](aws-properties-appconfig-configurationprofile-tags.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Type`  <a name="cfn-appconfig-configurationprofile-type"></a>
The type of configurations contained in the profile. AWS AppConfig supports `feature flags` and `freeform` configurations. We recommend you create feature flag configurations to enable or disable new features and freeform configurations to distribute configurations to an application. When calling this API, enter one of the following values for `Type`:  
 `AWS.AppConfig.FeatureFlags`   
 `AWS.Freeform`   
*Required*: No  
*Type*: String  
*Pattern*: `^[a-zA-Z\.]+`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Validators`  <a name="cfn-appconfig-configurationprofile-validators"></a>
A list of methods for validating the configuration.  
*Required*: No  
*Type*: [Array](aws-properties-appconfig-configurationprofile-validators.md) of [Validators](aws-properties-appconfig-configurationprofile-validators.md)  
*Maximum*: `2`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

## Return values
<a name="aws-resource-appconfig-configurationprofile-return-values"></a>

### Ref
<a name="aws-resource-appconfig-configurationprofile-return-values-ref"></a>

When you pass the logical ID of this resource to the intrinsic `Ref` function, `Ref` returns the configuration profile ID.

### Fn::GetAtt
<a name="aws-resource-appconfig-configurationprofile-return-values-fn--getatt"></a>

#### 
<a name="aws-resource-appconfig-configurationprofile-return-values-fn--getatt-fn--getatt"></a>

`ConfigurationProfileId`  <a name="ConfigurationProfileId-fn::getatt"></a>
The configuration profile ID.

`KmsKeyArn`  <a name="KmsKeyArn-fn::getatt"></a>
The Amazon Resource Name of the AWS Key Management Service key to encrypt new configuration data versions in the AWS AppConfig hosted configuration store. This attribute is only used for `hosted` configuration types. To encrypt data managed in other configuration stores, see the documentation for how to specify an AWS KMS key for that particular service.

## Examples
<a name="aws-resource-appconfig-configurationprofile--examples"></a>



**Topics**
+ [AWS AppConfig feature flag](#aws-resource-appconfig-configurationprofile--examples--feature_flag)
+ [AWS AppConfig configuration profile example - AWS CodePipeline](#aws-resource-appconfig-configurationprofile--examples--configuration_profile_example_-)
+ [AWS AppConfig configuration profile example - Parameter Store](#aws-resource-appconfig-configurationprofile--examples--configuration_profile_example_-_Parameter_Store)

### AWS AppConfig feature flag
<a name="aws-resource-appconfig-configurationprofile--examples--feature_flag"></a>

The following example creates an AWS AppConfig configuration profile of type `HostedConfigurationVersion`. The feature flag created by this example enables cryptocurrency at checkout. AWS AppConfig stores the configuration data for this profile in the AWS AppConfig hosted configuration store.

#### JSON
<a name="aws-resource-appconfig-configurationprofile--examples--feature_flag--json"></a>

```
{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Transform": "AWS::LanguageExtensions",
  "Resources": {
    "MySuperCoolApp": {
      "Type": "AWS::AppConfig::Application",
      "Properties": {
        "Name": "MySuperCoolApp"
      }
    },
    "MyFeatureFlags": {
      "Type": "AWS::AppConfig::ConfigurationProfile",
      "Properties": {
        "Name": "MyFeatureFlags",
        "ApplicationId": "MySuperCoolApp",
        "LocationUri": "hosted",
        "Type": "AWS.AppConfig.FeatureFlags"
      }
    },
    "MyFeatureFlagsVersion": {
      "Type": "AWS::AppConfig::HostedConfigurationVersion",
      "Properties": {
        "ApplicationId": "MySuperCoolApp",
        "ConfigurationProfileId": "MyFeatureFlags",
        "ContentType": "application/json",
        "VersionLabel": "v1.0.0",
        "Content": {
          "Fn::ToJsonString": {
            "flags": {
              "allow-cryptocurrency-at-checkout": {
                "attributes": {
                  "allowed-currency": {
                    "constraints": {
                      "elements": {
                        "enum": [
                          "BTC",
                          "ETH",
                          "XRP"
                        ],
                        "type": "string"
                      },
                      "type": "array"
                    }
                  },
                  "bitcoin-discount-percentage": {
                    "constraints": {
                      "maximum": 25,
                      "minimum": 0,
                      "type": "number"
                    }
                  }
                },
                "name": "Allow Cryptocurrency at Checkout"
              }
            },
            "values": {
              "allow-cryptocurrency-at-checkout": {
                "allowed-currency": [
                  "BTC",
                  "ETH"
                ],
                "bitcoin-discount-percentage": 5,
                "enabled": true
              }
            },
            "version": "1"
          }
        }
      }
    }
  }
}
```

#### YAML
<a name="aws-resource-appconfig-configurationprofile--examples--feature_flag--yaml"></a>

```
AWSTemplateFormatVersion: 2010-09-09
Transform: 'AWS::LanguageExtensions'
Resources:
  MySuperCoolApp:
    Type: 'AWS::AppConfig::Application'
    Properties:
      Name: MySuperCoolApp

  MyFeatureFlags:
    Type: 'AWS::AppConfig::ConfigurationProfile'
    Properties:
      Name: MyFeatureFlags
      ApplicationId: !Ref MySuperCoolApp
      LocationUri: hosted
      Type: AWS.AppConfig.FeatureFlags

  MyFeatureFlagsVersion:
    Type: 'AWS::AppConfig::HostedConfigurationVersion'
    Properties:
      ApplicationId: !Ref MySuperCoolApp
      ConfigurationProfileId: !Ref MyFeatureFlags
      ContentType: application/json
      VersionLabel: "v1.0.0"
      Content: 
        Fn::ToJsonString:
            flags:
              allow-cryptocurrency-at-checkout:
                attributes:
                  allowed-currency:
                    constraints:
                      elements:
                        enum:
                          - BTC
                          - ETH
                          - XRP
                        type: string
                      type: array
                  bitcoin-discount-percentage:
                    constraints:
                      maximum: 25
                      minimum: 0
                      type: number
                name: Allow Cryptocurrency at Checkout
            values:
              allow-cryptocurrency-at-checkout:
                allowed-currency:
                  - BTC
                  - ETH
                bitcoin-discount-percentage: 5
                enabled: true
            version: '1'
```

### AWS AppConfig configuration profile example - AWS CodePipeline
<a name="aws-resource-appconfig-configurationprofile--examples--configuration_profile_example_-"></a>

The following examples creates an AWS AppConfig configuration profile named MyTestConfigurationProfile. A configuration profile includes source information for accessing your configuration data. A configuration profile can also include optional validators to ensure your configuration data is syntactically and semantically correct. The following configuration profile example uses the specified `LocationUri` to retrieve configuration data from AWS CodePipeline.

#### JSON
<a name="aws-resource-appconfig-configurationprofile--examples--configuration_profile_example_---json"></a>

```
{
  "Resources": {
    "CodePipelineConfigurationProfile": {
      "Type": "AWS::AppConfig::ConfigurationProfile",
      "DependsOn": "MyTestApplication",
      "Properties": {
        "ApplicationId": "MyTestApplication",
        "Name": "MyTestConfigurationProfile",
        "Description": "My test configuration profile",
        "LocationUri": "codepipeline://YourPipelineName",
        "Validators": [
          {
            "Type": "LAMBDA",
            "Content": "MyLambdaValidator"
          }
        ],
        "Tags": [
          {
            "Key": "Env",
            "Value": "test"
          }
        ]
      }
    }
  }
}
```

#### YAML
<a name="aws-resource-appconfig-configurationprofile--examples--configuration_profile_example_---yaml"></a>

```
Resources:
  CodePipelineConfigurationProfile:
    Type: AWS::AppConfig::ConfigurationProfile
    Properties:
      ApplicationId: !Ref MyTestApplication
      Name: "MyTestConfigurationProfile"
      Description: "My test configuration profile"
      LocationUri: "codepipeline://YourPipelineName"
      Validators:
        - Type: LAMBDA
          Content: !ImportValue MyLambdaValidator
      Tags:
        - Key: Env
          Value: test
```

### AWS AppConfig configuration profile example - Parameter Store
<a name="aws-resource-appconfig-configurationprofile--examples--configuration_profile_example_-_Parameter_Store"></a>

The following examples creates an AWS AppConfig configuration profile named MyTestConfigurationProfile. A configuration profile includes source information for accessing your configuration data. A configuration profile can also include optional validators to ensure your configuration data is syntactically and semantically correct. The following configuration profile example uses the specified `RetrievalRoleArn` and `LocationUri` to retrieve configuration data from an SSM parameter.

#### JSON
<a name="aws-resource-appconfig-configurationprofile--examples--configuration_profile_example_-_Parameter_Store--json"></a>

```
{
  "Type": "AWS::AppConfig::ConfigurationProfile",
  "DependsOn": "MyTestApplication",
  "Properties": {
    "ApplicationId": {
      "Ref": "MyTestApplication"
    },
    "Name": "MyTestConfigurationProfile",
    "Description": "My test configuration profile",
    "RetrievalRoleArn": {
      "Fn::ImportValue": "ConfigurationRetrievalAndMonitoringRole"
    },
    "LocationUri": {
      "Fn::Sub": [
        "ssm-parameter://${ParameterName}",
        {
          "ParameterName": {
            "Fn::ImportValue": "SSMParameter"
          }
        }
      ]
    },
    "Validators": [
      {
        "Type": "LAMBDA",
        "Content": {
          "Fn::ImportValue": "MyLambdaValidator"
        }
      }
    ],
    "Tags": [
      {
        "Key": "Env",
        "Value": "Test"
      }
    ]
  }
}
```

#### YAML
<a name="aws-resource-appconfig-configurationprofile--examples--configuration_profile_example_-_Parameter_Store--yaml"></a>

```
Resources:
  BasicConfigurationProfile:
    Type: AWS::AppConfig::ConfigurationProfile
    Properties:
      ApplicationId: !Ref MyTestApplication
      Name: "MyTestConfigurationProfile"
      Description: "My test configuration profile"
      RetrievalRoleArn: !ImportValue ConfigurationRetrievalAndMonitoringRole
      LocationUri:
        Fn::Sub:
          - "ssm-parameter://${ParameterName}"
          - ParameterName: !ImportValue SSMParameter
      Validators:
        - Type: LAMBDA
          Content: !ImportValue MyLambdaValidator
      Tags:
        - Key: Env
          Value: test
```

## See also
<a name="aws-resource-appconfig-configurationprofile--seealso"></a>
+  [AWS AppConfig](https://docs.aws.amazon.com/appconfig/latest/userguide/what-is-appconfig.html) 
+  [Creating a configuration and a configuration profile ](https://docs.aws.amazon.com/systems-manager/latest/userguide/appconfig-creating-configuration-and-profile.html) 

# AWS::AppConfig::ConfigurationProfile Tags
<a name="aws-properties-appconfig-configurationprofile-tags"></a>

Metadata to assign to the configuration profile. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.

## Syntax
<a name="aws-properties-appconfig-configurationprofile-tags-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-appconfig-configurationprofile-tags-syntax.json"></a>

```
{
  "[Key](#cfn-appconfig-configurationprofile-tags-key)" : String,
  "[Value](#cfn-appconfig-configurationprofile-tags-value)" : String
}
```

### YAML
<a name="aws-properties-appconfig-configurationprofile-tags-syntax.yaml"></a>

```
  [Key](#cfn-appconfig-configurationprofile-tags-key): String
  [Value](#cfn-appconfig-configurationprofile-tags-value): String
```

## Properties
<a name="aws-properties-appconfig-configurationprofile-tags-properties"></a>

`Key`  <a name="cfn-appconfig-configurationprofile-tags-key"></a>
The key-value string map. The valid character set is `[a-zA-Z+-=._:/]`. The tag key can be up to 128 characters and must not start with `aws:`.  
*Required*: No  
*Type*: String  
*Minimum*: `1`  
*Maximum*: `128`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Value`  <a name="cfn-appconfig-configurationprofile-tags-value"></a>
The tag value can be up to 256 characters.  
*Required*: No  
*Type*: String  
*Minimum*: `0`  
*Maximum*: `256`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::AppConfig::ConfigurationProfile Validators
<a name="aws-properties-appconfig-configurationprofile-validators"></a>

A validator provides a syntactic or semantic check to ensure the configuration that you want to deploy functions as intended. To validate your application configuration data, you provide a schema or an AWS Lambda function that runs against the configuration. The configuration deployment or update can only proceed when the configuration data is valid. For more information, see [About validators](https://docs.aws.amazon.com/appconfig/latest/userguide/appconfig-creating-configuration-profile.html#appconfig-creating-configuration-and-profile-validators) in the *AWS AppConfig User Guide*.

## Syntax
<a name="aws-properties-appconfig-configurationprofile-validators-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-appconfig-configurationprofile-validators-syntax.json"></a>

```
{
  "[Content](#cfn-appconfig-configurationprofile-validators-content)" : String,
  "[Type](#cfn-appconfig-configurationprofile-validators-type)" : String
}
```

### YAML
<a name="aws-properties-appconfig-configurationprofile-validators-syntax.yaml"></a>

```
  [Content](#cfn-appconfig-configurationprofile-validators-content): String
  [Type](#cfn-appconfig-configurationprofile-validators-type): String
```

## Properties
<a name="aws-properties-appconfig-configurationprofile-validators-properties"></a>

`Content`  <a name="cfn-appconfig-configurationprofile-validators-content"></a>
Either the JSON Schema content or the Amazon Resource Name (ARN) of an Lambda function.  
*Required*: No  
*Type*: String  
*Minimum*: `0`  
*Maximum*: `32768`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Type`  <a name="cfn-appconfig-configurationprofile-validators-type"></a>
AWS AppConfig supports validators of type `JSON_SCHEMA` and `LAMBDA`  
*Required*: No  
*Type*: String  
*Allowed values*: `JSON_SCHEMA | LAMBDA`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)