AWS AWSCloudFormation documentation change
Summary
Added Fn::GetAtt attributes including security-related metrics like PermissionsBoundaryUsageCount
Security assessment
Documents attributes related to security features (permissions boundaries) but does not indicate a security vulnerability fix.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.md index a92cd5f90..1d48c6a45 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.md +++ b/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.md @@ -220,0 +221,58 @@ For more information about using the `Ref` function, see [`Ref`](https://docs.aw +### Fn::GetAtt + +The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values. + +For more information about using the `Fn::GetAtt` intrinsic function, see [`Fn::GetAtt`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html). + +#### + +`AttachmentCount` + + +The number of principal entities (users, groups, and roles) that the policy is attached to. + +`CreateDate` + + +The date and time, in [ISO 8601 date-time format](http://www.iso.org/iso/iso8601), when the policy was created. + +`DefaultVersionId` + + +The identifier for the version of the policy that is set as the default (operative) version. + +For more information about policy versions, see [Versioning for managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-versions.html) in the _IAM User Guide_. + +`IsAttachable` + + +Specifies whether the policy can be attached to an IAM user, group, or role. + +`PermissionsBoundaryUsageCount` + + +The number of entities (users and roles) for which the policy is used as the permissions boundary. + +For more information about permissions boundaries, see [Permissions boundaries for IAM identities ](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the _IAM User Guide_. + +`PolicyArn` + + +The Amazon Resource Name (ARN) of the managed policy that you want information about. + +For more information about ARNs, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the _AWS General Reference_. + +`PolicyId` + + +The stable and unique string identifying the policy. + +For more information about IDs, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the _IAM User Guide_. + +`UpdateDate` + + +The date and time, in [ISO 8601 date-time format](http://www.iso.org/iso/iso8601), when the policy was last updated. + +When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created. +