AWS AWSCloudFormation documentation change
Summary
Added DomainVersion property with allowed values V1/V2 and ServiceRole property with IAM role ARN pattern
Security assessment
ServiceRole addition documents IAM role requirements which are security-related, but there's no evidence of addressing a specific vulnerability. DomainVersion appears to be a versioning feature without explicit security context.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-domain.md index 2ef4ae94a..65531182e 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-domain.md +++ b/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-domain.md @@ -20,0 +21 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "DomainVersion" : String, @@ -22,0 +24 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "ServiceRole" : String, @@ -35,0 +38 @@ To declare this entity in your AWS CloudFormation template, use the following sy + DomainVersion: String @@ -37,0 +41 @@ To declare this entity in your AWS CloudFormation template, use the following sy + ServiceRole: String @@ -69,0 +74,13 @@ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormat +`DomainVersion` + + +The domain version. + +_Required_ : No + + _Type_ : String + + _Allowed values_ : `V1 | V2` + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + @@ -97,0 +115,13 @@ _Required_ : Yes +`ServiceRole` + + +Property description not available. + +_Required_ : No + + _Type_ : String + + _Pattern_ : `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` + +_Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) +