---
type: resource-type
title: Type
description: aws resource type AWS::Cassandra::Type
name: Type
lexicon: aws
resource_type: AWS::Cassandra::Type
---
`AWS::Cassandra::Type`, a resource type of the aws lexicon.

## Properties

- `Fields` (`Type_Field[]`, required): Field definitions of the User-Defined Type
- `KeyspaceName` (`string`, required): Name of the Keyspace which contains the User-Defined Type.
- `TypeName` (`string`, required): Name of the User-Defined Type.
- `DirectParentTypes` (`string[]`, optional): List of parent User-Defined Types that directly reference the User-Defined Type in their fields.
- `DirectReferringTables` (`string[]`, optional): List of Tables that directly reference the User-Defined Type in their columns.
- `KeyspaceArn` (`string`, optional): ARN of the Keyspace which contains the User-Defined Type.
- `LastModifiedTimestamp` (`number`, optional): Timestamp of the last time the User-Defined Type's meta data was modified.
- `MaxNestingDepth` (`number`, optional): Maximum nesting depth of the User-Defined Type across the field types.

## Attributes

- `DirectParentTypes`
- `DirectReferringTables`
- `KeyspaceArn`
- `LastModifiedTimestamp`
- `MaxNestingDepth`

## Governed by

- [EXT001](/rules/EXT001.md): Extension constraint violation — cross-property validation from cfn-lint extension schemas
- [WAW011](/rules/WAW011.md): Deprecated Lambda runtime — flags deprecated or approaching-EOL Lambda runtimes
- [WAW016](/rules/WAW016.md): Deprecated property usage — flags properties marked as deprecated in the CloudFormation Registry
- [WAW017](/rules/WAW017.md): Missing tags on taggable resource — suggests adding tags for cost allocation and compliance
- [WAW018](/rules/WAW018.md): S3 bucket missing public access block — all public access should be blocked
- [WAW019](/rules/WAW019.md): Security group allows unrestricted ingress on sensitive ports (SSH, RDP, database)
- [WAW020](/rules/WAW020.md): IAM policy uses wildcard Action — use specific actions following least privilege
- [WAW021](/rules/WAW021.md): RDS instance or cluster storage is not encrypted — enable encryption at rest
- [WAW022](/rules/WAW022.md): Lambda function is not configured with a VPC — consider adding VpcConfig for network isolation
- [WAW023](/rules/WAW023.md): CloudFront distribution has no WAF web ACL — consider attaching one for protection
- [WAW024](/rules/WAW024.md): Application Load Balancer does not have access logging enabled
- [WAW025](/rules/WAW025.md): SNS topic is not encrypted — add KmsMasterKeyId for encryption at rest
- [WAW026](/rules/WAW026.md): SQS queue is not encrypted — enable SqsManagedSseEnabled or set KmsMasterKeyId
- [WAW027](/rules/WAW027.md): DynamoDB table does not have point-in-time recovery enabled
- [WAW028](/rules/WAW028.md): EBS volume is not encrypted — enable encryption at rest
- [WAW030](/rules/WAW030.md): Missing DependsOn for known CloudFormation ordering patterns
- [WAW031](/rules/WAW031.md): EKS Addon missing ServiceAccountRoleArn for addons that require IRSA
- [WAW032](/rules/WAW032.md): EFS volume on Fargate task has transit encryption disabled
- [WAW033](/rules/WAW033.md): Solr SOLR_HEAP exceeds 50% of Fargate task memory
- [WAW034](/rules/WAW034.md): Fargate task running Solr has insufficient memory (< 2048MB)
- [WAW035](/rules/WAW035.md): Solr container missing nofile ulimit >= 65535
- [WAW036](/rules/WAW036.md): Non-ASCII characters in EC2/IAM/CW string properties — rejected at changeset time
- [WAW037](/rules/WAW037.md): Null values in CFN resource properties — caused by invalid AttrRef (.PropName) usage
- [WAW038](/rules/WAW038.md): RDS instance is publicly accessible — keep databases inside the VPC
- [WAW039](/rules/WAW039.md): RDS instance or cluster has automated backups disabled — set a positive BackupRetentionPeriod
- [WAW040](/rules/WAW040.md): RDS instance or cluster does not have DeletionProtection enabled (full tier)
- [WAW041](/rules/WAW041.md): RDS Proxy does not require TLS for client connections
- [WAW042](/rules/WAW042.md): S3 bucket missing a TLS-only bucket policy — deny requests over plaintext
- [WAW043](/rules/WAW043.md): KMS customer-managed key does not have automatic key rotation enabled
- [WAW044](/rules/WAW044.md): ALB HTTP listener does not redirect to HTTPS (full tier)
- [WAW045](/rules/WAW045.md): ALB HTTPS/TLS listener does not use a modern (TLS 1.2+) SslPolicy
- [WAW046](/rules/WAW046.md): ECS container passes a secret-looking value via plaintext Environment instead of Secrets
- [WAW047](/rules/WAW047.md): ECS container runs privileged — drop elevated host access
- [WAW048](/rules/WAW048.md): ECS container does not have a LogConfiguration — enable logging for audit trails
- [WAW049](/rules/WAW049.md): Security group allows unrestricted ingress on a port other than ALB:80/443
- [WAW050](/rules/WAW050.md): Cognito UserPool does not have advanced security (risk-based auth) enabled
- [WAW051](/rules/WAW051.md): Cognito UserPoolClient allows the deprecated implicit OAuth grant
- [WAW052](/rules/WAW052.md): Cognito UserPool does not require MFA (full tier)
- [WAW053](/rules/WAW053.md): ECR repository does not scan images on push
- [WAW054](/rules/WAW054.md): ECR repository does not have immutable image tags
- [WAW055](/rules/WAW055.md): CloudWatch Logs log group has no retention period set
- [WAW056](/rules/WAW056.md): SCP guardrail has no Deny statement — it constrains nothing
- [WAW057](/rules/WAW057.md): SCP guardrail is attached to no targets — it enforces nothing
- [WAW058](/rules/WAW058.md): Organization audit trail missing, not logging, or scoped down to a single region
- [WAW059](/rules/WAW059.md): Wildcard Resource where the declared graph enumerates the touched set — tighten to the consumers' declared Arns
- [WAW060](/rules/WAW060.md): IAM policy attached to no principal — it grants nothing
- [WAW061](/rules/WAW061.md): Subnet CidrBlock falls outside its VPC's CidrBlock — fails at deploy time
- [WAW062](/rules/WAW062.md): Duplicate export name or explicit resource name within a template — fails at deploy time
- [WAW063](/rules/WAW063.md): IAM policy denies an action another attached policy on the same role allows — explicit Deny wins, runtime 403