AWS AWSCloudFormation documentation change
Summary
Added ComputeRoleArn and EnableSkewProtection properties with documentation about IAM roles for SSR apps and deployment skew protection
Security assessment
Added documentation for security-related features (IAM role assignment and skew protection) but no evidence of addressing existing vulnerabilities
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.md b/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.md index e962b1dd4..85dafaa46 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.md +++ b/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.md @@ -23,0 +24 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "ComputeRoleArn" : String, @@ -27,0 +29 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "EnableSkewProtection" : Boolean, @@ -48,0 +51 @@ To declare this entity in your AWS CloudFormation template, use the following sy + ComputeRoleArn: String @@ -52,0 +56 @@ To declare this entity in your AWS CloudFormation template, use the following sy + EnableSkewProtection: Boolean @@ -142,0 +147,17 @@ _Minimum_ : `1` +`ComputeRoleArn` + + +The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app. The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see [Adding an SSR Compute role](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html) in the _Amplify User Guide_. + +_Required_ : No + + _Type_ : String + + _Pattern_ : `(?s).*` + +_Minimum_ : `0` + + _Maximum_ : `1000` + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + @@ -190,0 +212,13 @@ For more information, see [Web Previews](https://docs.aws.amazon.com/amplify/lat +_Required_ : No + + _Type_ : Boolean + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + +`EnableSkewProtection` + + +Specifies whether the skew protection feature is enabled for the branch. + +Deployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see [Skew protection for Amplify deployments](https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html) in the _Amplify User Guide_. +