AWS AWSCloudFormation documentation change
Summary
Reformatted JSON/YAML examples with proper indentation and structure without changing actual configuration values
Security assessment
Changes are purely formatting improvements to example templates without modifying security configurations or addressing vulnerabilities
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.md b/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.md index c51c7acea..c75157140 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.md +++ b//AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.md @@ -182,19 +182,72 @@ The Amazon Resource Name (ARN) of the security profile. - { "AWSTemplateFormatVersion": "2010-09-09", "Description": "Amazon - Web Services IoT SecurityProfile Sample Template", "Resources": { "MySecurityProfile": { - "Type": "AWS::IoT::SecurityProfile", "Properties": { "AdditionalMetricsToRetainV2": [ { - "Metric": "aws:num-messages-received" }, { "Metric": "aws:num-disconnects" } ], - "AlertTargets": { "SNS": { "AlertTargetArn": - "arn:aws:sns:us-east-1:123456789012:DeviceDefenderDetectAlerts", "RoleArn": - "arn:aws:iam::123456789012:role/RoleForDefenderAlerts" } }, "Behaviors": [ { "Name": - "MaxMessageSize", "Metric": "aws:message-byte-size", "Criteria": { - "ConsecutiveDatapointsToAlarm": 1, "ConsecutiveDatapointsToClear": 1, - "ComparisonOperator": "less-than-equals", "Value": { "Count": 5 } } }, { "Name": - "OutboundMessageCount", "Metric": "aws:num-messages-sent", "Criteria": { - "DurationSeconds": 300, "ComparisonOperator": "less-than-equals", "Value": { "Count": 50 - } } }, { "Name": "AuthFailuresStatThreshold", "Metric": - "aws:num-authorization-failures", "Criteria": { "ComparisonOperator": - "less-than-equals", "DurationSeconds": 300, "StatisticalThreshold": { "Statistic": "p90" - } } } ], "SecurityProfileDescription": "Contains expected behaviors for connected - devices", "SecurityProfileName": "ProfileForConnectedDevices", "Tags": [ { "Key": - "Application", "Value": "SmartHome" } ], "TargetArns": [ - "arn:aws:iot:us-east-1:123456789012:all/things" ] } } } } + { + "AWSTemplateFormatVersion": "2010-09-09", + "Description": "Amazon Web Services IoT SecurityProfile Sample Template", + "Resources": { + "MySecurityProfile": { + "Type": "AWS::IoT::SecurityProfile", + "Properties": { + "AdditionalMetricsToRetainV2": [ + { + "Metric": "aws:num-messages-received" + }, + { + "Metric": "aws:num-disconnects" + } + ], + "AlertTargets": { + "SNS": { + "AlertTargetArn": "arn:aws:sns:us-east-1:123456789012:DeviceDefenderDetectAlerts", + "RoleArn": "arn:aws:iam::123456789012:role/RoleForDefenderAlerts" + } + }, + "Behaviors": [ + { + "Name": "MaxMessageSize", + "Metric": "aws:message-byte-size", + "Criteria": { + "ConsecutiveDatapointsToAlarm": 1, + "ConsecutiveDatapointsToClear": 1, + "ComparisonOperator": "less-than-equals", + "Value": { + "Count": 5 + } + } + }, + { + "Name": "OutboundMessageCount", + "Metric": "aws:num-messages-sent", + "Criteria": { + "DurationSeconds": 300, + "ComparisonOperator": "less-than-equals", + "Value": { + "Count": 50 + } + } + }, + { + "Name": "AuthFailuresStatThreshold", + "Metric": "aws:num-authorization-failures", + "Criteria": { + "ComparisonOperator": "less-than-equals", + "DurationSeconds": 300, + "StatisticalThreshold": { + "Statistic": "p90" + } + } + } + ], + "SecurityProfileDescription": "Contains expected behaviors for connected devices", + "SecurityProfileName": "ProfileForConnectedDevices", + "Tags": [ + { + "Key": "Application", + "Value": "SmartHome" + } + ], + "TargetArns": [ + "arn:aws:iot:us-east-1:123456789012:all/things" + ] + } + } + } + } @@ -205,15 +258,43 @@ The Amazon Resource Name (ARN) of the security profile. - AWSTemplateFormatVersion: 2010-09-09 Description: Amazon Web - Services IoT SecurityProfile Sample Template Resources: MySecurityProfile: Type: - 'AWS::IoT::SecurityProfile' Properties: AdditionalMetricsToRetainV2: - Metric: - 'aws:num-messages-received' - Metric: 'aws:num-disconnects' AlertTargets: SNS: - AlertTargetArn: 'arn:aws:sns:us-east-1:123456789012:DeviceDefenderDetectAlerts' RoleArn: - 'arn:aws:iam::123456789012:role/RoleForDefenderAlerts' Behaviors: - Name: MaxMessageSize - Metric: 'aws:message-byte-size' Criteria: ConsecutiveDatapointsToAlarm: 1 - ConsecutiveDatapointsToClear: 1 ComparisonOperator: less-than-equals Value: Count: 5 - - Name: OutboundMessageCount Metric: 'aws:num-messages-sent' Criteria: DurationSeconds: - 300 ComparisonOperator: less-than-equals Value: Count: 50 - Name: - AuthFailuresStatThreshold Metric: 'aws:num-authorization-failures' Criteria: - ComparisonOperator: less-than-equals DurationSeconds: 300 StatisticalThreshold: - Statistic: p90 SecurityProfileDescription: Contains expected behaviors for connected - devices SecurityProfileName: ProfileForConnectedDevices Tags: - Key: Application Value: - SmartHome TargetArns: - 'arn:aws:iot:us-east-1:123456789012:all/things' + AWSTemplateFormatVersion: '2010-09-09' + Description: Amazon Web Services IoT SecurityProfile Sample Template + Resources: + MySecurityProfile: + Type: 'AWS::IoT::SecurityProfile' + Properties: + AdditionalMetricsToRetainV2: + - Metric: 'aws:num-messages-received' + - Metric: 'aws:num-disconnects' + AlertTargets: + SNS: + AlertTargetArn: 'arn:aws:sns:us-east-1:123456789012:DeviceDefenderDetectAlerts' + RoleArn: 'arn:aws:iam::123456789012:role/RoleForDefenderAlerts' + Behaviors: + - Name: MaxMessageSize + Metric: 'aws:message-byte-size' + Criteria: + ConsecutiveDatapointsToAlarm: 1 + ConsecutiveDatapointsToClear: 1 + ComparisonOperator: less-than-equals + Value: + Count: 5 + - Name: OutboundMessageCount + Metric: 'aws:num-messages-sent' + Criteria: + DurationSeconds: 300 + ComparisonOperator: less-than-equals + Value: + Count: 50 + - Name: AuthFailuresStatThreshold + Metric: 'aws:num-authorization-failures' + Criteria: + ComparisonOperator: less-than-equals + DurationSeconds: 300 + StatisticalThreshold: + Statistic: p90 + SecurityProfileDescription: Contains expected behaviors for connected devices + SecurityProfileName: ProfileForConnectedDevices + Tags: + - Key: Application + Value: SmartHome + TargetArns: + - 'arn:aws:iot:us-east-1:123456789012:all/things'