AWS cdk documentation change

Service: cdk · 2025-03-30 · Documentation low

File: cdk/v2/guide/bootstrapping-env.md

Summary

Added documentation for bootstrap template versions 26 (KMS key deletion policies) and 27 (ECR resource policy for EMR Serverless)

Security assessment

Version 26 adds resource deletion safeguards which improve security hygiene but doesn't address a specific vulnerability. Version 27 documents new ECR permissions which are security-related

Diff

diff --git a/cdk/v2/guide/bootstrapping-env.md b/cdk/v2/guide/bootstrapping-env.md
index f7e319acb..388288757 100644
--- a/cdk/v2/guide/bootstrapping-env.md
+++ b/cdk/v2/guide/bootstrapping-env.md
@@ -308,0 +309,2 @@ Template version | AWS CDK version | Changes
+**26** | 2.1002.0 | Add two deletion-related policies (`UpdateReplacePolicy` and `DeletionPolicy` to the `FileAssetsBucketEncryptionKey`) resource. These policies ensure that the old AWS KMS key resource will be properly deleted when the bootstrap stack is updated or deleted. For more information on this change, see `aws-cdk-cli` PR [#100](https://github.com/aws/aws-cdk-cli/pull/100).  
+**27** | 2.1003.0 | Add new Amazon ECR resource policy to grant Amazon EMR Serverless specific permissions for retrieving container images. For more information on this change, see `aws-cdk-cli` PR [#112](https://github.com/aws/aws-cdk-cli/pull/112).