AWS AWSCloudFormation documentation change
Summary
Updated release notes including WAFv2 WebACLAssociation Amplify support, moved OpenSearch security config entries, added RUM AppMonitor deobfuscation config, and new IdentityStore resources
Security assessment
Adds documentation for security features including RUM resource policies, OpenSearch lifecycle policies, and IdentityStore group management resources. No evidence of addressing specific vulnerabilities.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md b/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md index d33278f99..8adf63170 100644 --- a/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md +++ b/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md @@ -11 +11 @@ Change| Description| Date -[New resource](./aws-template-resource-type-ref.html#AWS_OpenSearchServerless)| The following resource were added: AWS::OpenSearchServerless::SecurityConfig.IamIdentityCenterOptions.ApplicationArn, AWS::OpenSearchServerless::SecurityConfig.IamIdentityCenterOptions.ApplicationDescription, AWS::OpenSearchServerless::SecurityConfig.IamIdentityCenterOptions.ApplicationName SecurityConfig.IamIdentityCenterConfigOptions.ApplicationName, SecurityConfig.IamIdentityCenterConfigOptions.GroupAttribute . +[Updated resources](./aws-template-resource-type-ref.html#AWS_WAFv2)| The following resource was updated: AWS::WAFv2::WebACLAssociation. @@ -13,3 +13,3 @@ Change| Description| Date -[AWS::OpenSearchServerless::SecurityConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-securityconfig.html) - Use the `AWS::OpenSearchServerless::LifecyclePolicy` resource to create lifecycle access policies for Amazon OpenSearch Serverless. -| June 25, 2025 +[AWS::WAFv2::WebACLAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webaclassociation.html) + The `ResourceArn` property now accepts `AWS` Amplify instance ARNs. +| March 26, 2025 @@ -26,5 +25,0 @@ Change| Description| Date -[Updated resource](./aws-template-resource-type-ref.html#AWS_RUM)| The following resource was updated: AWS::RUM::AppMonitor. - -[AWS::RUM::AppMonitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html) - The `ResourcePolicy` property was added to the `AWS::RUM::AppMonitor` resource to support the use of resource policies to control access to app monitors. For more information, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html). -| March 13, 2025 @@ -59,0 +55,5 @@ Change| Description| Date +[New resource](./aws-template-resource-type-ref.html#AWS_OpenSearchServerless)| The following resource were added: AWS::OpenSearchServerless::SecurityConfig.IamIdentityCenterOptions.ApplicationArn, AWS::OpenSearchServerless::SecurityConfig.IamIdentityCenterOptions.ApplicationDescription, AWS::OpenSearchServerless::SecurityConfig.IamIdentityCenterOptions.ApplicationName SecurityConfig.IamIdentityCenterConfigOptions.ApplicationName, SecurityConfig.IamIdentityCenterConfigOptions.GroupAttribute . + +[AWS::OpenSearchServerless::SecurityConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-securityconfig.html) + Use the `AWS::OpenSearchServerless::LifecyclePolicy` resource to create lifecycle access policies for Amazon OpenSearch Serverless. +| February 25, 2025 @@ -2527,0 +2528,5 @@ The following resources were added: AWS::AppSync::SourceApiAssociation +[Updated resource](./aws-template-resource-type-ref.html#AWS_RUM)| The following resource was updated: AWS::RUM::AppMonitor. + +[AWS::RUM::AppMonitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html) + The `DeobfuscationConfiguration` property was updated in the `AWS::RUM::AppMonitor` resource to support the use of source maps. For more information, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html). +| March 26, 2023 @@ -2576,0 +2582,5 @@ The following resources were added: AWS::AppSync::SourceApiAssociation +[AWS::RUM::AppMonitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html) + The `ResourcePolicy` property was added to the `AWS::RUM::AppMonitor` resource to support the use of resource policies to control access to app monitors. For more information, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html). +| March 16, 2023 +[Updated resource](./aws-template-resource-type-ref.html#AWS_RUM)| The following resource was updated: AWS::RUM::AppMonitor. + @@ -3355,0 +3366,7 @@ Improved insights on stack instances for stack set operations| AWS CloudFormatio +[New resources](./aws-template-resource-type-ref.html#AWS_IdentityStore)| The following resources were added: AWS::IdentityStore::Group and AWS::IdentityStore::GroupMembership. + +[AWS::IdentityStore::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-identitystore-group.html) + Use the `AWS::IdentityStore::Group` resource to manage groups in an identity store. +[AWS::IdentityStore::GroupMembership](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-identitystore-groupmembership.html) + Use the `AWS::IdentityStore::GroupMembership` resource to manage group membership in an identity store. +| September 7, 2022