AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-02-26 · Documentation low

File: AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-connector.md

Summary

Updated ARN pattern validation for certificate authority to require specific UUID format

Security assessment

Pattern tightening improves validation but doesn't explicitly address a security vulnerability. Change appears to enforce correct formatting rather than fix a security flaw.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-connector.md
index 1061192c3..9802bf1ab 100644
--- a/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-connector.md
+++ b/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-connector.md
@@ -51 +51 @@ _Required_ : Yes
- _Pattern_ : `^arn:[\w-]+:acm-pca:[\w-]+:[0-9]+:certificate-authority(\/[\w-]+)$`
+ _Pattern_ : `^arn:[\w-]+:acm-pca:[\w-]+:[0-9]+:certificate-authority\/[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$`