AWS Security ChangesHomeSearch

AWS cloudformation-cli documentation change

Service: cloudformation-cli · 2025-03-23 · Documentation low

File: cloudformation-cli/latest/hooks-userguide/lambda-hooks-activate-hooks.md

Summary

Updated activation steps with new navigation pane selection and corrected CLI parameter name (--execution-role to --execution-role-arn). Incremented all step numbers after adding a new navigation step.

Security assessment

The changes primarily correct step numbering and CLI parameter syntax. While the execution role ARN correction ensures proper IAM role usage, this is a documentation accuracy improvement rather than addressing a specific security vulnerability.

Diff

diff --git a/cloudformation-cli/latest/hooks-userguide/lambda-hooks-activate-hooks.md b/cloudformation-cli/latest/hooks-userguide/lambda-hooks-activate-hooks.md
index d88628137..0509a24e3 100644
--- a/cloudformation-cli/latest/hooks-userguide/lambda-hooks-activate-hooks.md
+++ b/cloudformation-cli/latest/hooks-userguide/lambda-hooks-activate-hooks.md
@@ -38 +38,3 @@ If you have already created your Lambda function, proceed to the next step.
-  4. For **Hook name** , choose one of the following options:
+  4. In the navigation pane on the left, choose **Hooks**.
+
+  5. For **Hook name** , choose one of the following options:
@@ -44 +46 @@ If you have already created your Lambda function, proceed to the next step.
-  5. For **Lambda function** , provide the Lambda function to be used with this Hook. You can use: 
+  6. For **Lambda function** , provide the Lambda function to be used with this Hook. You can use: 
@@ -50 +52 @@ If you have already created your Lambda function, proceed to the next step.
-  6. For **Hook targets** , choose what to evaluate:
+  7. For **Hook targets** , choose what to evaluate:
@@ -60 +62 @@ If you have already created your Lambda function, proceed to the next step.
-  7. For **Actions** , choose which actions (create, update, delete) will invoke your Hook.
+  8. For **Actions** , choose which actions (create, update, delete) will invoke your Hook.
@@ -62 +64 @@ If you have already created your Lambda function, proceed to the next step.
-  8. For **Hook mode** , choose how the Hook responds when the Lambda function invoked by the Hook returns a `FAILED` response:
+  9. For **Hook mode** , choose how the Hook responds when the Lambda function invoked by the Hook returns a `FAILED` response:
@@ -68 +70 @@ If you have already created your Lambda function, proceed to the next step.
-  9. For **Execution role** , choose the IAM role that the Hook assumes to invoke your Lambda function. You can either allow CloudFormation to automatically create an execution role for you or you can specify a role that you've created. 
+  10. For **Execution role** , choose the IAM role that the Hook assumes to invoke your Lambda function. You can either allow CloudFormation to automatically create an execution role for you or you can specify a role that you've created. 
@@ -70 +72 @@ If you have already created your Lambda function, proceed to the next step.
-  10. Choose **Next**.
+  11. Choose **Next**.
@@ -72 +74 @@ If you have already created your Lambda function, proceed to the next step.
-  11. (Optional) For **Hook filters** , do the following:
+  12. (Optional) For **Hook filters** , do the following:
@@ -98 +100 @@ For Cloud Control API operations, all **Stack names** and **Stack roles** filter
-  12. Choose **Next**.
+  13. Choose **Next**.
@@ -100 +102 @@ For Cloud Control API operations, all **Stack names** and **Stack roles** filter
-  13. On the **Review and activate** page, review your choices. To make changes, choose **Edit** on the related section.
+  14. On the **Review and activate** page, review your choices. To make changes, choose **Edit** on the related section.
@@ -102 +104 @@ For Cloud Control API operations, all **Stack names** and **Stack roles** filter
-  14. When you're ready to proceed, choose **Activate Hook**.
+  15. When you're ready to proceed, choose **Activate Hook**.
@@ -118 +120 @@ Before you continue, confirm that you have created the Lambda function and the e
-      --execution-role arn:aws:iam::123456789012:role/my-execution-role \
+      --execution-role-arn arn:aws:iam::123456789012:role/my-execution-role \