Ben Kehoe

I'd prefer this being a single more general function, something like `Fn::StringTransform` that takes a string and an "enum" (another string, of course, but with a closed set of values)...

> might not be a good fit for a transform This issue is not the right place for a discussion on this, but given the transform is the only place...

To put this in more concrete terms, what sense does it make to have a `Type` CloudFormation resource type _that has its own property called [`Type`](https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-cloudformation/blob/efaf2776d921643a6f9c2bbf1efe1b217a51dd9c/aws-cloudformation-typeversion/aws-cloudformation-typeversion.json#L105)?_ Can you really argue...

I don't really think that `aws sso login` should check for access, as the token it should receive and cache isn't credentials for a particular account and role, and it...

With the new Identity Center sessions configuration ([link to docs](https://docs.aws.amazon.com/cli/latest/userguide/sso-configure-profile-token.html)), it's more explicit that `aws sso login` is not accessing a particular account and role: ```ini [sso-session my-session] sso_start_url =...

Changing this to an issue on the cross-SDK repo: https://github.com/aws/aws-sdk/issues/562

Most resources support name and ARN, one only through `Ref` and one through `GetAtt` (maddeningly it's not consistent which one goes with which). What drives your need to use `GetAtt`...

I agree, it's annoying! And with the new resource provider model, the identifiers used for `Ref` _have names already._ But your desire for it isn't specific to this resource, correct?...

What functionality of SAR do you hope to use with a template with these resources in it? Would such a use case be solved by types in the CloudFormation registry...

Would you distribute this via as a public SAR app or as a template/SAM project to be deployed by the customer? If you would distribute via a public SAR app,...