AWS AWSCloudFormation documentation change
Summary
Updated CleanRooms resources with security configurations, added IaC generator partial scanning, and corrected documentation links.
Security assessment
Introduces security-related properties (e.g., job logging, protected outputs) but does not address a specific security incident.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md b/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md index 1a2be0725..753931555 100644 --- a//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md +++ b//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md @@ -10,0 +11,11 @@ Change| Description| Date +[Updated resources](./aws-template-resource-type-ref.html#AWS_CleanRooms)| The following resources were updated: `AWS::CleanRooms::AnalysisTemplate`, `AWS::CleanRooms::Collaboration`, `AWS::CleanRooms::Membership`, and `AWS::CleanRooms::ConfiguredTable`. + +[AWS::CleanRooms::AnalysisTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-analysistemplate.html) + Use the `AnalysisTemplateArtifacts` property to specify the entry point and additional artifacts for the analysis template. Use the `SourceMetadata` property to specify the source metadata for the analysis template. Use the `Schema` property to specify the entire schema object for the analysis template. In the [Hash](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-analysistemplate-hash.html) property type, use the `Sha256` property to specify the SHA-256 hash value. In the [S3Location](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-analysistemplate-s3location.html) property type, use the `Bucket` property to specify the bucket name and the `Key` property to specify the object key. +[AWS::CleanRooms::Collaboration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-collaboration.html) + Use the `JobComputePaymentConfig` property to specify payment responsibilities for query and job compute costs. Use the `PaymentConfiguration` property to specify the compute configuration for the job. Use the `JobLogStatus` property to enable or disable job logging for the collaboration. In the [ProtectedJobS3OutputConfigurationInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-protectedjobs3outputconfigurationinput.html) property type, use the `Bucket` property to specify the S3 bucket for job output and the `KeyPrefix` property to specify the S3 prefix to unload the protected job results. +[AWS::CleanRooms::Membership](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-membership.html) + Use the `MembershipProtectedJobResultConfiguration` property to specify configurations for protected job results. Use the `MembershipJobComputePaymentConfig` property to specify the payment responsibilities for job compute costs. Use the `DefaultJobResultConfiguration` property to specify the default job result configuration for the membership. Use the `JobLogStatus` property to enable or disable job logging for the membership. +[AWS::CleanRooms::ConfiguredTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtable.html) + Use the `SelectedAnalysisMethods` property to specify the selected analysis methods for the configured table. +| April 9, 2025 @@ -12,0 +24,6 @@ Change| Description| Date +[Updated resource](./aws-template-resource-type-ref.html#AWS_ApplicationSignals)| The following resource was updated: AWS::ApplicationSignals::ServiceLevelObjective RequestBasedSli + +[AWS::ApplicationSignals::ServiceLevelObjective](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationsignals-servicelevelobjective-requestbasedsli.html) + Use the `DependencyConfig` property to identify the dependency using the `DependencyKeyAttributes` and `DependencyOperationName`. For more information, see [ Create an SLO](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-ServiceLevelObjectives.html#CloudWatch-ServiceLevelObjectives-Create). +| March 28, 2025 +IaC generator supports partial scanning| You can now choose specific resource types to scan for, making it easier to generate Infrastructure-as-Code (IaC) templates from your existing resources.For more information, see [Start a resource scan with CloudFormation IaC generator](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/iac-generator-start-resource-scan.html).| March 27, 2025 @@ -27,0 +45,5 @@ Change| Description| Date +[Updated resource](./aws-template-resource-type-ref.html#AWS_ApplicationSignals)| The following resource was updated: AWS::ApplicationSignals::ServiceLevelObjective RequestBasedSli + +[AWS::ApplicationSignals::Discovery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationsignals-servicelevelobjective-requestbasedsli.html) + The `ExclusionWindow` property to enable you to add time exclusion windows that should be excluded from the SLO performance metrics. For more information, see [ Exclusion Window ](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-ServiceLevelObjectives.html). +| March 13, 2025 @@ -671 +693 @@ The following resources were added: AWS::AppSync::ChannelNamespace -Visualize your scanned resources and generated templates| You can now streamline your Infrastructure as Code (IaC) generator workflows by visualizing scan summary details and previewing the generated templates before deploying your infrastructure stack.For more information, see [View the scan summary in the CloudFormation console](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC-view-scan-summary.html) and [Create a CloudFormation stack from scanned resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/iac-generator-create-stack-from-scanned-resources.html).| August 22, 2024 +Visualize your scanned resources and generated templates| You can now streamline your Infrastructure-as-Code (IaC) generator workflows by visualizing scan summary details and previewing the generated templates before deploying your infrastructure stack.For more information, see [View the scan summary in the CloudFormation console](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC-view-scan-summary.html) and [Create a CloudFormation stack from scanned resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/iac-generator-create-stack-from-scanned-resources.html).| August 22, 2024 @@ -7421 +7443 @@ CloudFormation registry API actions| The following API actions for managing type -Resource import added| If you created an AWS resource outside of AWS CloudFormation management, you can bring this existing resource into CloudFormation management using `resource import`.For more information, see [Bringing Existing Resources Into CloudFormation Management](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import.html).| November 11, 2019 +Resource import added| If you created an AWS resource outside of AWS CloudFormation management, you can bring this existing resource into CloudFormation management using `resource import`.For more information, see [Bringing Existing Resources Into CloudFormation Management](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/import-resources.html).| November 11, 2019