AWS AWSCloudFormation medium security documentation change

Service: AWSCloudFormation · 2025-03-30 · Security-related medium

File: AWSCloudFormation/latest/UserGuide/registry-public-activate-extension.md

Summary

Corrected CLI parameter from --execution-role to --execution-role-arn in extension activation example

Security assessment

Fixes a critical IAM role parameter name in CLI documentation. Incorrect role parameter could lead to execution role misconfiguration, potentially causing privilege escalation or unauthorized access if users followed outdated instructions.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/registry-public-activate-extension.md b/AWSCloudFormation/latest/UserGuide/registry-public-activate-extension.md
index 70a3643da..58894cd28 100644
--- a/AWSCloudFormation/latest/UserGuide/registry-public-activate-extension.md
+++ b/AWSCloudFormation/latest/UserGuide/registry-public-activate-extension.md
@@ -143 +143 @@ The example below specifies the public Amazon Resource Name (ARN) of a public ex
-      --execution-role arn:aws:iam::123456789012:role/my-execution-role \
+      --execution-role-arn arn:aws:iam::123456789012:role/my-execution-role \