AWS AWSCloudFormation documentation change
Summary
Updated ARN pattern validation for certificate authority to require specific UUID format
Security assessment
Pattern tightening improves validation but doesn't explicitly address a security vulnerability. Change appears to enforce correct formatting rather than fix a security flaw.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-connector.md index 1061192c3..9802bf1ab 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-connector.md +++ b/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-connector.md @@ -51 +51 @@ _Required_ : Yes - _Pattern_ : `^arn:[\w-]+:acm-pca:[\w-]+:[0-9]+:certificate-authority(\/[\w-]+)$` + _Pattern_ : `^arn:[\w-]+:acm-pca:[\w-]+:[0-9]+:certificate-authority\/[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$`