AWS AWSCloudFormation documentation change
Summary
Added documentation for device certificate age check configuration and clarified expiration check configurability
Security assessment
Enhances documentation for existing security audit features (certificate lifecycle checks) but doesn't indicate a specific security issue being addressed.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-iot-accountauditconfiguration-auditcheckconfigurations.md index a2fede61e..537ae4daf 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-properties-iot-accountauditconfiguration-auditcheckconfigurations.md +++ b/AWSCloudFormation/latest/UserGuide/aws-properties-iot-accountauditconfiguration-auditcheckconfigurations.md @@ -125 +125 @@ _Required_ : No -Property description not available. +Checks when a device certificate has been active for a number of days greater than or equal to the number you specify. @@ -136 +136 @@ _Required_ : No -Checks if a device certificate is expiring. This check applies to device certificates expiring within 30 days or that have expired. +Checks if a device certificate is expiring. By default, this check applies to device certificates expiring within 30 days or that have expired. You can modify this threshold by configuring the DeviceCertExpirationAuditCheckConfiguration.