AWS resources, SAM stacks, and CloudFormation support

Core classes provide the CloudFormation/SAM vocabulary shared by every AWS service resource, including logical IDs, tags, parameters, expressions, and lifecycle controls.

Source: mde/metamodels/psm/awspsm-core.emf.

`AwsResource`

An abstract aws resource concept. Use one of its concrete subtypes when creating a model instance; the shared attributes and relationships defined here still apply.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`logicalId`	`String` [1]	The CloudFormation/SAM identifier used inside a stack. It must be stable and unique because dependencies, intrinsic references, generated template sections, and change tracking address resources through it. Semantic validation: `LogicalIdValid` (logical id valid) in `mde/validation/psm/rules/core.evl` the value must match a required format. `LogicalIdUniqueInStack` (logical id unique in stack) in `mde/validation/psm/rules/core.evl` the rule's diagnostic or remediation guidance refers to this feature. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/naming.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/validation.eol`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `OrdersFunction`.
`physicalName`	`String` [1]	The deployed AWS name, when the model needs a stable name beyond CloudFormation's generated physical identity. It is deliberately separate from logicalId because replacement and environment naming follow different rules. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/cfn.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/iam.eol`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `orders-${StageName}`.
`awsResourceType`	`String` [1]	The CloudFormation or SAM resource type that gives the abstract resource its provider meaning, such as `AWS::Serverless::Function` or `AWS::DynamoDB::Table`. Semantic validation: `DeployableResourceHasAwsType` (deployable resource has aws type) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/cfn.eol`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `AWS::Serverless::Function`.
`resourceDescription`	`String` [1]	Operational context for the deployed resource, carried into generated infrastructure or documentation so an operator can identify its responsibility. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/cfn.eol`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `Processes confirmed orders for the owning capability.`.
`conditionName`	`String` [1]	The CloudFormation condition controlling whether the resource is materialized. It allows environment-sensitive infrastructure without hiding the decision in template text.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `$.status == 'READY'`.
`retainInProduction`	`Boolean` [1]	Whether production deletion should retain the resource or its data. It is a model-level safety decision checked alongside CloudFormation deletion policies. Semantic validation: `ProductionResourcesShouldRetainOnDelete` (production resources should retain on delete) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass.	Either `true` or `false`. Example: `true`.
`productionCritical`	`Boolean` [1]	Whether failure or replacement of the resource threatens production operation, guiding readiness, dependency review, and operational prioritization.	Either `true` or `false`. Example: `true`.
`importedResource`	`Boolean` [1]	Whether AWS owns the resource outside this model. Marking this explicitly prevents generators from treating an existing resource as safe to create, replace, or delete. Semantic validation: `ImportedResourceHasImportIdentity` (imported resource has import identity) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass. `NonImportedResourceShouldNotHaveImportMetadata` (non imported resource should not have import metadata) in `mde/validation/psm/rules/core.evl` the value must satisfy a numeric or ordering boundary.	Either `true` or `false`. Example: `false`.
`importedArn`	`String` [1]	The ARN used to identify an externally managed resource when importedResource is true. It is the bridge between the model's reference and the deployed resource identity. Semantic validation: `ImportedResourceHasImportIdentity` (imported resource has import identity) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. `NonImportedResourceShouldNotHaveImportMetadata` (non imported resource should not have import metadata) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `arn:aws:s3:::orders-existing`.
`costAllocationTagValue`	`String` [1]	The resource-specific cost attribution value, allowing generated tagging to preserve financial ownership or chargeback boundaries.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `READY`.
`deletionPolicy`	`CloudFormationDeletionPolicy` [1]	The CloudFormation action on stack deletion. RETAIN or SNAPSHOT can be essential for production data, so the value is a safety decision rather than a template preference. Semantic validation: `ProductionResourcesShouldRetainOnDelete` (production resources should retain on delete) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/cfn.eol`.	Exactly one of: `DELETE`, `RETAIN`, `RETAIN_EXCEPT_ON_CREATE`, `SNAPSHOT`. Example: `DELETE`.
`updateReplacePolicy`	`CloudFormationUpdateReplacePolicy` [1]	The CloudFormation action when an update requires replacement. It protects data and critical resources from being destroyed as an incidental consequence of configuration change. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/cfn.eol`.	Exactly one of: `DELETE`, `RETAIN`, `SNAPSHOT`. Example: `DELETE`.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`tags` → `AwsTag`	containment, [*]	Contains the aws tag element(s) that make up this aws resource; the contained objects belong to this model element.
`metadata` → `NativeProperty`	containment, [*]	Contains the native property element(s) that make up this aws resource; the contained objects belong to this model element.
`overrides` → `NativeProperty`	containment, [*]	Contains the native property element(s) that make up this aws resource; the contained objects belong to this model element.
`importDetails` → `ResourceImport`	containment, [?]	Contains the resource import element(s) that make up this aws resource; the contained objects belong to this model element.
`stack` → `SamStack`	reference; read-only, [?]; opposite `resources`	References the sam stack element(s) used as stack by this aws resource; the target may be shared elsewhere in the model.
`dependsOn` → `AwsResource`	reference, [*]	References the aws resource element(s) used as depends on by this aws resource; the target may be shared elsewhere in the model.

`AwsTag`

Represents aws tag in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`key`	`String` [1]	The organizational key used to classify and govern the resource. It must avoid AWS-reserved namespaces and remain unique within a resource. Semantic validation: `TagKeyHasText` (tag key has text) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. `AvoidAwsReservedTagPrefix` (avoid aws reserved tag prefix) in `mde/validation/psm/rules/core.evl` the feature participates in a semantic validation condition.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `Owner`.
`value`	`String` [1]	The value associated with the tag key, such as an owner, environment, cost center, or data classification.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `orders-team`.
`propagated`	`Boolean` [1]	Whether the tag should flow to supported child resources or stacks, distinguishing deliberate propagation from an accidental inheritance assumption.	Either `true` or `false`. Example: `false`.

Relationships

This class declares no direct relationships.

`ResourceImport`

Represents resource import in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`importedArn`	`String` [1]	For a resource import, the model records the AWS ARN used for imported. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `arn:aws:lambda:us-east-1:123456789012:function:orders`.
`importedName`	`String` [1]	For a resource import, the model records the stable name/key/code used for imported name. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `ResourceImportExample`.
`importedLogicalId`	`String` [1]	Records the stable name/key/code used for imported logical id for the resource import. This keeps the decision explicit even when the element's class or relationships remain unchanged. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `order-123`.
`importSource`	`String` [1]	Records the origin/source selected for import source for the resource import. This keeps the decision explicit even when the element's class or relationships remain unchanged. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `Resource Import Import Source`.
`managedOutsideModel`	`Boolean` [1]	Records whether managed outside model applies to resource import. The field records an explicit architectural or governance decision as an explicit, reviewable input. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.

Relationships

This class declares no direct relationships.

`NativeProperty`

Represents native property in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`propertyName`	`String` [1]	The provider property being represented when the typed metamodel does not yet have a dedicated feature. It preserves the exact CloudFormation/SAM key. Semantic validation: `RequiredNativePropertyHasValue` (required native property has value) in `mde/validation/psm/rules/core.evl` the rule's diagnostic or remediation guidance refers to this feature. `SecretNativePropertyUsesSecureExpression` (secret native property uses secure expression) in `mde/validation/psm/rules/core.evl` the rule's diagnostic or remediation guidance refers to this feature. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/cfn.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/values.eol`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `NativePropertyExample`.
`required`	`Boolean` [1]	Whether the native property must have a value before generation. It prevents an intentionally incomplete placeholder from being emitted as a deployable-looking template. Semantic validation: `RequiredNativePropertyHasValue` (required native property has value) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass.	Either `true` or `false`. Example: `true`.
`secret`	`Boolean` [1]	Whether the native property carries sensitive data, activating secure-value validation rather than allowing a plaintext literal. Semantic validation: `RequiredNativePropertyHasValue` (required native property has value) in `mde/validation/psm/rules/core.evl` the feature participates in a semantic validation condition. `SecretNativePropertyUsesSecureExpression` (secret native property uses secure expression) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass.	Either `true` or `false`. Example: `false`.
`format`	`StructuredFormat` [1]	The serialization format expected by the property value, allowing JSON, YAML, intrinsic syntax, and other structured values to be generated correctly.	Exactly one of: `TEXT`, `JSON`, `YAML`, `TOML`, `XML`, `MARKDOWN`, `ASL_JSON`, `IAM_POLICY_JSON`, `CLOUDFORMATION_INTRINSIC`, `OTHER`. Example: `TEXT`.
`validationState`	`Decision` [1]	The modeler's decision about whether the property's value has been validated, is required, is intentionally omitted, or remains generator-owned.	Exactly one of: `UNDECIDED`, `REQUIRED`, `NOT_REQUIRED`, `ACCEPTED`, `NEEDS_REVIEW`, `GENERATOR_OWNED`. Example: `UNDECIDED`.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`value` → `ValueExpression`	containment, [1]	Contains the value expression element(s) that make up this native property; the contained objects belong to this model element.

`ValueExpression`

Represents value expression in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`literal`	`String` [1]	A literal value embedded in the generated template. It is appropriate for non-secret constants and invalid when the selected sourceKind requires a resource, parameter, or secure reference. Semantic validation: `ValueExpressionSourceShape` (value expression source shape) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. `PlainTextHasLiteral` (plain text has literal) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/cfn.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/validation.eol`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `Value Expression Literal`.
`expression`	`String` [1]	The intrinsic/reference expression that supplies a value at deployment or runtime. It keeps substitution logic structured instead of hiding it in arbitrary JSON text. Semantic validation: `ValueExpressionSourceShape` (value expression source shape) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. `PlainTextHasLiteral` (plain text has literal) in `mde/validation/psm/rules/core.evl` the rule's diagnostic or remediation guidance refers to this feature.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `${OrdersFunction.Arn}`.
`attributeName`	`String` [1]	The attribute read from a referenced resource for GETATT or resource-attribute semantics; it identifies exactly which provider output is being consumed. Semantic validation: `ValueExpressionSourceShape` (value expression source shape) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. `GetAttHasResourceAndAttribute` (get att has resource and attribute) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `Arn`.
`secret`	`Boolean` [1]	Whether the value must be treated as sensitive. EVL requires secure source kinds for secrets so credentials do not enter plaintext templates or generated code. Semantic validation: `ValueExpressionSourceShape` (value expression source shape) in `mde/validation/psm/rules/core.evl` the feature participates in a semantic validation condition. `SecretLiteralReviewed` (secret literal reviewed) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass.	Either `true` or `false`. Example: `false`.
`sourceKind`	`ValueSourceKind` [1]	The provenance mechanism for the value, literal, CloudFormation reference, SSM, Secrets Manager, import, list, map, or another intrinsic form. It determines which companion fields are valid. Semantic validation: `ValueExpressionSourceShape` (value expression source shape) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. `SecretLiteralReviewed` (secret literal reviewed) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank.	Exactly one of: `PLAINTEXT`, `CLOUDFORMATION_REF`, `CLOUDFORMATION_GETATT`, `CLOUDFORMATION_SUB`, `SSM_PARAMETER_REFERENCE`, `SSM_SECURE_REFERENCE`, `SECRETS_MANAGER_REFERENCE`, `DYNAMIC_REFERENCE`, `IMPORT_VALUE`, `RESOURCE_ATTRIBUTE`, `LIST`, `MAP`. Example: `PLAINTEXT`.
`expectedType`	`ValueType` [1]	The type the consuming property expects, such as ARN, URL, JSON, or secret. It lets validation catch a well-formed expression whose result is still semantically incompatible.	Exactly one of: `STRING`, `NUMBER`, `BOOLEAN`, `LIST`, `MAP`, `ARN`, `NAME`, `URL`, `JSON`, `SECRET`. Example: `STRING`.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`items` → `ValueExpression`	containment, [*]	Contains the value expression element(s) that make up this value expression; the contained objects belong to this model element.
`entries` → `NamedValueExpression`	containment, [*]	Contains the named value expression element(s) that make up this value expression; the contained objects belong to this model element.
`resource` → `AwsResource`	reference, [?]	References the aws resource element(s) used as resource by this value expression; the target may be shared elsewhere in the model.
`parameter` → `CfnParameter`	reference, [?]	References the cfn parameter element(s) used as parameter by this value expression; the target may be shared elsewhere in the model.

`NamedValueExpression`

Represents named value expression in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`key`	`String` [1]	Records the stable name/key/code used for key for the named value expression. This keeps the decision explicit even when the element's class or relationships remain unchanged. Semantic validation: `MapEntryHasKey` (map entry has key) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `orderId`.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`value` → `ValueExpression`	containment, [1]	Contains the value expression element(s) that make up this named value expression; the contained objects belong to this model element.

`CorsConfiguration`

Represents cors configuration in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`allowOrigins`	`String` [*]	Records the allow origins value for cors configuration. It keeps this decision explicit during review and transformation, so later steps do not have to infer it. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/values.eol`.	A collection of values. Example: [`Cors Configuration Allow Origins`, `Cors Configuration Allow Origins-2`].
`allowMethods`	`String` [*]	Stores the allow methods value on the cors configuration. The field keeps the model explicit and reviewable during review and transformation instead of leaving the decision to an inferred default. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/values.eol`.	A collection of values. Example: [`Cors Configuration Allow Methods`, `Cors Configuration Allow Methods-2`].
`allowHeaders`	`String` [*]	Stores the allow headers value on the cors configuration. The field keeps the model explicit and reviewable during review and transformation instead of leaving the decision to an inferred default. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/values.eol`.	A collection of values. Example: [`Cors Configuration Allow Headers`, `Cors Configuration Allow Headers-2`].
`exposeHeaders`	`String` [*]	Records the expose headers value for the cors configuration. This keeps the decision explicit even when the element's class or relationships remain unchanged. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/values.eol`.	A collection of values. Example: [`Cors Configuration Expose Headers`, `Cors Configuration Expose Headers-2`].
`maxAgeSeconds`	`Integer` [1]	Records max age seconds duration or limit, expressed in seconds for cors configuration. It keeps an operational boundary that should not be left to provider defaults explicit during review and transformation, so later steps do not have to infer it. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/values.eol`.	A numeric `Integer` value; use the unit or boundary documented for this attribute. Example: `1`.
`allowCredentials`	`Boolean` [1]	For a cors configuration, the model records whether allow credentials applies. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/values.eol`.	Either `true` or `false`. Example: `true`.

Relationships

This class declares no direct relationships.

`TracingConfig`

An abstract tracing config concept. Use one of its concrete subtypes when creating a model instance; the shared attributes and relationships defined here still apply.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`enabled`	`Boolean` [1]	Records whether enabled applies to tracing config. It preserves an explicit architectural or governance decision through review and transformation, so later steps do not have to infer it. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `true`.

Relationships

This class declares no direct relationships.

`AwsNativeResource`

Represents aws native resource in the PSM vocabulary. It specializes AwsResource with the details needed for this modeling concern.

Direct supertypes: AwsResource. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`cloudFormationType`	`String` [1]	Stores the controlled classification or strategy represented by cloud formation type on the aws native resource. The field keeps the model explicit and reviewable during review and transformation instead of leaving the decision to an inferred default. Semantic validation: `NativeResourceTypeNameValid` (native resource type name valid) in `mde/validation/psm/rules/core.evl` the value must match a required format. Transformation role: ETL rule `Api2NativeUnsupportedApi` in `mde/transformations/pim-to-awspsm/compute-api.etl` assigns or materializes this feature while refining `AwsNativeResource`. ETL rule `DecisionModel2PsmMetadata` in `mde/transformations/pim-to-awspsm/contracts-external-policy.etl` assigns or materializes this feature while refining `AwsNativeResource`. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/cfn.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `BUSINESS`.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`properties` → `NativeProperty`	containment, [+]	Contains the native property element(s) that make up this aws native resource; the contained objects belong to this model element.

`AwsStage`

Represents aws stage in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`stageName`	`String` [1]	The deployment stage identity used by promotion and stack selection. It is the human-facing counterpart to environmentClass and must remain stable for operators. Semantic validation: `StageHasAccountAndRegion` (stage has account and region) in `mde/validation/psm/rules/core.evl` the rule's diagnostic or remediation guidance refers to this feature. `ProdRequiresApproval` (prod requires approval) in `mde/validation/psm/rules/core.evl` the rule's diagnostic or remediation guidance refers to this feature. Transformation role: ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `AwsStage`. ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` reads or derives this feature while refining `AwsStage`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `prod`.
`accountId`	`String` [1]	The AWS account receiving the stage. Keeping it in the model makes cross-account promotion explicit and allows validation to reject an under-specified deployment target. Semantic validation: `StageHasAccountAndRegion` (stage has account and region) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. Transformation role: ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `AwsStage`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `123456789012`.
`region`	`String` [1]	The concrete AWS region for the stage, overriding or specializing the model default where required. Semantic validation: `StageHasAccountAndRegion` (stage has account and region) in `mde/validation/psm/rules/core.evl` the value must be present and non-blank. Transformation role: ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `AwsStage`. ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` reads or derives this feature while refining `AwsStage`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `us-east-1`.
`deploymentRoleArn`	`String` [1]	The role used by the deployment process, separating deployment authority from the runtime roles assumed by Lambda or other services.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `arn:aws:iam::123456789012:role/OrdersDeploy`.
`artifactBucketName`	`String` [1]	The bucket used to package or stage deployment artifacts, making the release pipeline's storage dependency visible and governable.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `AwsStageExample`.
`requiresManualApproval`	`Boolean` [1]	Whether a human must approve this stage before deployment. Production EVL requires the control so a generated changeset cannot silently become a production change. Semantic validation: `ProdRequiresApproval` (prod requires approval) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass. Transformation role: ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `AwsStage`. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/validation.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/docs/model-summary.egl`.	Either `true` or `false`. Example: `false`.
`confirmChangeset`	`Boolean` [1]	Whether operators must confirm the CloudFormation changeset before execution, preserving a review point between generation and mutation. Semantic validation: `ProdShouldConfirmChangeset` (prod should confirm changeset) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass. Transformation role: ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `AwsStage`.	Either `true` or `false`. Example: `false`.
`failOnEmptyChangeset`	`Boolean` [1]	Whether an empty deployment is considered a failure. It prevents a pipeline from reporting success when it produced no effective infrastructure change. Transformation role: ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `AwsStage`.	Either `true` or `false`. Example: `false`.
`stackNamePrefix`	`String` [1]	The stable prefix shared by stacks in this stage, making environment ownership visible in AWS while allowing stack-specific suffixes. Transformation role: ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `AwsStage`. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/sam.eol`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `Aws Stage Stack Name Prefix`.
`environmentClass`	`AwsEnvironmentClass` [1]	The operational class of the stage. It drives production safeguards and separates DEV/TEST/STAGING/PROD/DR behavior from arbitrary display names. Semantic validation: `ProdRequiresApproval` (prod requires approval) in `mde/validation/psm/rules/core.evl` the feature participates in a semantic validation condition. `ProdShouldConfirmChangeset` (prod should confirm changeset) in `mde/validation/psm/rules/core.evl` the feature participates in a semantic validation condition. Transformation role: ETL rule `Environment2AwsStage` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `AwsStage`. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/paths.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/validation.eol`.	Exactly one of: `DEV`, `TEST`, `STAGING`, `PROD`, `SANDBOX`, `DR`. Example: `DEV`.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`parameterOverrides` → `KeyValue`	containment, [*]	Contains the key value element(s) that make up this aws stage; the contained objects belong to this model element.
`stageTags` → `AwsTag`	containment, [*]	Contains the aws tag element(s) that make up this aws stage; the contained objects belong to this model element.
`deploysStacks` → `SamStack`	reference, [*]	References the sam stack element(s) used as deploys stacks by this aws stage; the target may be shared elsewhere in the model.

`SamStack`

Represents sam stack in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`stackName`	`String` [1]	The CloudFormation stack identity used for deployment, change sets, resource ownership, and cross-stack references. Semantic validation: `DeployableStackHasResources` (deployable stack has resources) in `mde/validation/psm/rules/core.evl` the rule's diagnostic or remediation guidance refers to this feature. `StackHasResources` (stack has resources) in `mde/validation/psm/rules/core.evl` the rule's diagnostic or remediation guidance refers to this feature. Transformation role: ETL rule `DeploymentUnit2SamStack` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `SamStack`. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/naming.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/sam.eol`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `orders-prod`.
`templatePath`	`String` [1]	The output location of the generated SAM/CloudFormation template, connecting the model resource boundary to the artifact pipeline. Transformation role: ETL rule `DeploymentUnit2SamStack` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `SamStack`. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/naming.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/tests/security-test.egl`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `infrastructure/template.yaml`.
`templateDescription`	`String` [1]	The stack-level explanation shown to operators and reviewers, useful when several generated stacks share similar resource types. Transformation role: ETL rule `DeploymentUnit2SamStack` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `SamStack`. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `Processes confirmed orders for the owning capability.`.
`useSamTransform`	`Boolean` [1]	Whether the AWS SAM transform is enabled. Without it, serverless shorthand resources and properties cannot be interpreted as intended by CloudFormation. Semantic validation: `SamTransformRecommended` (sam transform recommended) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass. Transformation role: ETL rule `DeploymentUnit2SamStack` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `SamStack`. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl`.	Either `true` or `false`. Example: `false`.
`packageIndividually`	`Boolean` [1]	Whether functions or deployable units are packaged separately, trading artifact isolation and deployment granularity against packaging overhead. Transformation role: ETL rule `DeploymentUnit2SamStack` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `SamStack`.	Either `true` or `false`. Example: `false`.
`validateWithSam`	`Boolean` [1]	Whether generated templates must pass SAM validation before deployment, making provider-specific syntax errors an explicit gate. Semantic validation: `ValidationToolsRecommended` (validation tools recommended) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass. Transformation role: ETL rule `DeploymentUnit2SamStack` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `SamStack`.	Either `true` or `false`. Example: `false`.
`validateWithCfnLint`	`Boolean` [1]	Whether cfn-lint validation is required, adding CloudFormation resource/property and structural checks to the release path. Semantic validation: `ValidationToolsRecommended` (validation tools recommended) in `mde/validation/psm/rules/core.evl` the flag must be enabled for this rule to pass. Transformation role: ETL rule `DeploymentUnit2SamStack` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` assigns or materializes this feature while refining `SamStack`.	Either `true` or `false`. Example: `false`.
`capabilities`	`SamCapability` [*]	The CloudFormation capabilities the stack is allowed to use, such as IAM or named IAM. It makes elevated template behavior visible before deployment. Transformation role: ETL rule `DeploymentUnit2SamStack` in `mde/transformations/pim-to-awspsm/root-stage-stack.etl` reads or derives this feature while refining `SamStack`. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/sam.eol`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/scripts/deploy.egl`.	A collection containing only these literals: `CAPABILITY_IAM`, `CAPABILITY_NAMED_IAM`, `CAPABILITY_AUTO_EXPAND`. Example: [`CAPABILITY_IAM`].

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`parameters` → `CfnParameter`	containment, [*]	Contains the cfn parameter element(s) that make up this sam stack; the contained objects belong to this model element.
`mappings` → `CfnMapping`	containment, [*]	Contains the cfn mapping element(s) that make up this sam stack; the contained objects belong to this model element.
`conditions` → `CfnCondition`	containment, [*]	Contains the cfn condition element(s) that make up this sam stack; the contained objects belong to this model element.
`resources` → `AwsResource`	containment, [*]; opposite `stack`	Contains the aws resource element(s) that make up this sam stack; the contained objects belong to this model element.
`outputs` → `CfnOutput`	containment, [*]	Contains the cfn output element(s) that make up this sam stack; the contained objects belong to this model element.
`globals` → `NativeProperty`	containment, [*]	Contains the native property element(s) that make up this sam stack; the contained objects belong to this model element.
`metadata` → `NativeProperty`	containment, [*]	Contains the native property element(s) that make up this sam stack; the contained objects belong to this model element.

`CfnParameter`

Represents cfn parameter in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

| Attribute | Type and multiplicity | What it captures and why it exists | Accepted values and example | | ---------------------- | --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- | ---- | -------- | | parameterName | String [1] | Stores the stable name/key/code used for parameter name on the cfn parameter. The field keeps the model explicit and reviewable during review and transformation instead of leaving the decision to an inferred default. Transformation role: ETL rule ConfigParameter2CfnParameter in mde/transformations/pim-to-awspsm/workflow-security-config.etl assigns or materializes this feature while refining CfnParameter. | A free-form String, subject to this class's semantic meaning and any EVL constraints. Example: StageName. | | type | String [1] | Stores the controlled classification or strategy represented by type on the cfn parameter. The field keeps the model explicit and reviewable during review and transformation instead of leaving the decision to an inferred default. Transformation role: ETL rule ConfigParameter2CfnParameter in mde/transformations/pim-to-awspsm/workflow-security-config.etl assigns or materializes this feature while refining CfnParameter. Generation role: The artifact generator references this feature in mde/generation/awspsm-to-artifacts/lib/cfn.eol. The artifact generator references this feature in mde/generation/awspsm-to-artifacts/lib/contracts.eol. | A free-form String, subject to this class's semantic meaning and any EVL constraints. Example: BUSINESS. | | allowedValues | String [*] | For a cfn parameter, the model records the allowed values value. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. Generation role: The artifact generator references this feature in mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl. | A collection of values. Example: [READY, READY-2]. | | allowedPattern | String [1] | Stores the validation pattern for allowed pattern on the cfn parameter. The field records input/schema validation as an explicit, reviewable input. Transformation role: ETL rule ConfigParameter2CfnParameter in mde/transformations/pim-to-awspsm/workflow-security-config.etl assigns or materializes this feature while refining CfnParameter. | A free-form String, subject to this class's semantic meaning and any EVL constraints. Example: ^(dev | test | prod)$. | | parameterDescription | String [1] | Records human explanation of parameter description for cfn parameter. It keeps human review and generated guidance explicit during review and transformation, so later steps do not have to infer it. Transformation role: ETL rule ConfigParameter2CfnParameter in mde/transformations/pim-to-awspsm/workflow-security-config.etl assigns or materializes this feature while refining CfnParameter. Generation role: The artifact generator references this feature in mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl. | A free-form String, subject to this class's semantic meaning and any EVL constraints. Example: Processes confirmed orders for the owning capability.. | | noEcho | Boolean [1] | For a cfn parameter, the model records whether no echo applies. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. Transformation role: ETL rule ConfigParameter2CfnParameter in mde/transformations/pim-to-awspsm/workflow-security-config.etl assigns or materializes this feature while refining CfnParameter. Generation role: The artifact generator references this feature in mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl. | Either true or false. Example: false. |

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`defaultValue` → `ValueExpression`	containment, [?]	Contains the value expression element(s) that make up this cfn parameter; the contained objects belong to this model element.

`CfnMapping`

Represents cfn mapping in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`mappingName`	`String` [1]	For a cfn mapping, the model records the stable name/key/code used for mapping name. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `CfnMappingExample`.
`content`	`String` [1]	Stores the content value on the cfn mapping. The field preserves structured provider or contract detail as an explicit, reviewable input. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/awspsm2artifacts.egx`. The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/lib/contracts.eol`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `Cfn Mapping Content`.
`format`	`StructuredFormat` [1]	For a cfn mapping, the model records the serialization/content format for format. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Exactly one of: `TEXT`, `JSON`, `YAML`, `TOML`, `XML`, `MARKDOWN`, `ASL_JSON`, `IAM_POLICY_JSON`, `CLOUDFORMATION_INTRINSIC`, `OTHER`. Example: `TEXT`.

Relationships

This class declares no direct relationships.

`CfnCondition`

Represents cfn condition in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`conditionName`	`String` [1]	Stores the stable name/key/code used for condition name on the cfn condition. The field keeps the model explicit and reviewable during review and transformation instead of leaving the decision to an inferred default. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `$.status == 'READY'`.
`expression`	`String` [1]	Stores the expression or rule that governs expression on the cfn condition. The field keeps the model explicit and reviewable during review and transformation instead of leaving the decision to an inferred default. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `$.status == 'READY'`.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`expressionValue` → `ValueExpression`	containment, [?]	Contains the value expression element(s) that make up this cfn condition; the contained objects belong to this model element.

`CfnOutput`

Represents cfn output in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`outputName`	`String` [1]	Stores the stable name/key/code used for output name on the cfn output. The field keeps the model explicit and reviewable during review and transformation instead of leaving the decision to an inferred default. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `CfnOutputExample`.
`outputDescription`	`String` [1]	Records human explanation of output description for cfn output. It keeps human review and generated guidance explicit during review and transformation, so later steps do not have to infer it. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `Processes confirmed orders for the owning capability.`.
`exportName`	`String` [1]	Records the stable name/key/code used for export name for the cfn output. This keeps the decision explicit even when the element's class or relationships remain unchanged. Generation role: The artifact generator references this feature in `mde/generation/awspsm-to-artifacts/templates/infrastructure/sam-template.egl`.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `CfnOutputExample`.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`value` → `ValueExpression`	containment, [1]	Contains the value expression element(s) that make up this cfn output; the contained objects belong to this model element.
`resource` → `AwsResource`	reference, [?]	References the aws resource element(s) used as resource by this cfn output; the target may be shared elsewhere in the model.

`SamGlobals`

Represents sam globals in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

This class declares no attributes of its own. It inherits the attributes of its supertype, if any.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`functionGlobals` → `NativeProperty`	containment, [*]	Contains the native property element(s) that make up this sam globals; the contained objects belong to this model element.
`apiGlobals` → `NativeProperty`	containment, [*]	Contains the native property element(s) that make up this sam globals; the contained objects belong to this model element.
`httpApiGlobals` → `NativeProperty`	containment, [*]	Contains the native property element(s) that make up this sam globals; the contained objects belong to this model element.
`stateMachineGlobals` → `NativeProperty`	containment, [*]	Contains the native property element(s) that make up this sam globals; the contained objects belong to this model element.

`AwsNamingPolicy`

Represents aws naming policy in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`logicalIdPattern`	`String` [1]	Records the validation pattern for logical id pattern for the aws naming policy. This keeps the decision explicit even when the element's class or relationships remain unchanged. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `^[A-Z][A-Za-z0-9_-]*$`.
`physicalNamePattern`	`String` [1]	Records validation pattern for physical name pattern for aws naming policy. It keeps input/schema validation explicit during review and transformation, so later steps do not have to infer it. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	A free-form `String`, subject to this class's semantic meaning and any EVL constraints. Example: `^[A-Z][A-Za-z0-9_-]*$`.
`includeStageInPhysicalNames`	`Boolean` [1]	Records whether include stage in physical names applies to aws naming policy. It preserves an explicit architectural or governance decision through review and transformation, so later steps do not have to infer it. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.
`includeServiceInPhysicalNames`	`Boolean` [1]	Records whether include service in physical names applies to aws naming policy. The field records an explicit architectural or governance decision as an explicit, reviewable input. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.
`allowGeneratedPhysicalNames`	`Boolean` [1]	For a aws naming policy, the model records whether allow generated physical names applies. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `true`.

Relationships

This class declares no direct relationships.

`AwsTaggingPolicy`

Represents aws tagging policy in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`requireOwnerTag`	`Boolean` [1]	For a aws tagging policy, the model records the accountable person, team, or identity for require owner tag. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.
`requireEnvironmentTag`	`Boolean` [1]	Records whether require environment tag applies to aws tagging policy. The field records an explicit architectural or governance decision as an explicit, reviewable input. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.
`requireCostCenterTag`	`Boolean` [1]	Records whether require cost center tag applies to aws tagging policy. This keeps the decision explicit even when the element's class or relationships remain unchanged. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.
`propagateStackTags`	`Boolean` [1]	For a aws tagging policy, the model records whether propagate stack tags applies. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.

Relationships

Relationship	Kind and multiplicity	Meaning in the model
`requiredTags` → `AwsTag`	containment, [*]	Contains the aws tag element(s) that make up this aws tagging policy; the contained objects belong to this model element.

`AwsSecurityBaseline`

Represents aws security baseline in the PSM vocabulary. It specializes TraceableElement with the details needed for this modeling concern.

Direct supertypes: TraceableElement. Inherited attributes and marker capabilities are documented in the shared kernel; this section lists every attribute declared by this class.

Declared attributes

Attribute	Type and multiplicity	What it captures and why it exists	Accepted values and example
`encryptionAtRestDefault`	`Boolean` [1]	Records whether encryption at rest default applies to aws security baseline. It preserves an explicit architectural or governance decision through review and transformation, so later steps do not have to infer it. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.
`publicAccessBlockedDefault`	`Boolean` [1]	For a aws security baseline, the model records whether public access blocked default applies. Keeping the fact with its owning element lets validation and refinement inspect it before artifact generation. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `true`.
`xrayDefault`	`Boolean` [1]	Records whether xray default applies to aws security baseline. This keeps the decision explicit even when the element's class or relationships remain unchanged. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.
`structuredLogsDefault`	`Boolean` [1]	Records whether structured logs default applies to aws security baseline. It preserves an explicit architectural or governance decision through review and transformation, so later steps do not have to infer it. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `false`.
`leastPrivilegeRequired`	`Boolean` [1]	Records whether least privilege required applies to aws security baseline. This keeps the decision explicit even when the element's class or relationships remain unchanged. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `true`.
`productionDeletionProtectionDefault`	`Boolean` [1]	Records data-lifecycle rule for production deletion protection default for aws security baseline. It keeps retention and data-lifecycle controls explicit during review and transformation, so later steps do not have to infer it. The repository contains no direct EVL rule, ETL assignment, or artifact-generator read for this declared field. For now, it remains a model-level fact for review and future refinement.	Either `true` or `false`. Example: `true`.

Relationships

This class declares no direct relationships.