AWS general documentation change
Summary
Added documentation for throttle rate limits of multiple CloudFormation API actions across supported regions
Security assessment
The changes document API rate limits which help prevent abuse/overload, but there's no explicit mention of addressing a specific security vulnerability. Rate limiting is a standard operational control that contributes to security posture.
Diff
diff --git a/general/latest/gr/cfn.md b/general/latest/gr/cfn.md index a1282fa09..f80efc35c 100644 --- a//general/latest/gr/cfn.md +++ b//general/latest/gr/cfn.md @@ -84,0 +85,73 @@ Template Size | Each supported Region: 1 Megabytes | No | The maximum size of a +Throttle rate limit for ActivateOrganizationsAccess | Each supported Region: 2 | No | The maximum number of ActivateOrganizationsAccess requests you can make per second per account, in the current region +Throttle rate limit for BatchDescribeTypeConfigurations | Each supported Region: 2 | No | The maximum number of BatchDescribeTypeConfigurations requests you can make per second per account, in the current region +Throttle rate limit for CancelUpdateStack | Each supported Region: 2 | No | The maximum number of CancelUpdateStack requests you can make per second per account, in the current region +Throttle rate limit for ContinueUpdateRollback | Each supported Region: 2 | No | The maximum number of ContinueUpdateRollback requests you can make per second per account, in the current region +Throttle rate limit for CreateChangeSet | Each supported Region: 2 | No | The maximum number of CreateChangeSet requests you can make per second per account, in the current region +Throttle rate limit for CreateGeneratedTemplate | Each supported Region: 2 | No | The maximum number of CreateGeneratedTemplate requests you can make per second per account, in the current region +Throttle rate limit for CreateStack | Each supported Region: 2 | No | The maximum number of CreateStack requests you can make per second per account, in the current region +Throttle rate limit for CreateStackInstances | Each supported Region: 2 | No | The maximum number of CreateStackInstances requests you can make per second per account, in the current region +Throttle rate limit for CreateStackSet | Each supported Region: 2 | No | The maximum number of CreateStackSet requests you can make per second per account, in the current region +Throttle rate limit for DeleteChangeSet | Each supported Region: 2 | No | The maximum number of DeleteChangeSet requests you can make per second per account, in the current region +Throttle rate limit for DeleteGeneratedTemplate | Each supported Region: 2 | No | The maximum number of DeleteGeneratedTemplate requests you can make per second per account, in the current region +Throttle rate limit for DeleteStack | Each supported Region: 2 | No | The maximum number of DeleteStack requests you can make per second per account, in the current region +Throttle rate limit for DeleteStackInstances | Each supported Region: 2 | No | The maximum number of DeleteStackInstances requests you can make per second per account, in the current region +Throttle rate limit for DeleteStackSet | Each supported Region: 2 | No | The maximum number of DeleteStackSet requests you can make per second per account, in the current region +Throttle rate limit for DeregisterType | Each supported Region: 2 | No | The maximum number of DeregisterType requests you can make per second per account, in the current region +Throttle rate limit for DescribeAccountLimits | Each supported Region: 2 | No | The maximum number of DescribeAccountLimits requests you can make per second per account, in the current region +Throttle rate limit for DescribeChangeSet | Each supported Region: 2 | No | The maximum number of DescribeChangeSet requests you can make per second per account, in the current region +Throttle rate limit for DescribeGeneratedTemplate | Each supported Region: 2 | No | The maximum number of DescribeGeneratedTemplate requests you can make per second per account, in the current region +Throttle rate limit for DescribeOrganizationsAccess | Each supported Region: 2 | No | The maximum number of DescribeOrganizationsAccess requests you can make per second per account, in the current region +Throttle rate limit for DescribePublisher | Each supported Region: 2 | No | The maximum number of DescribePublisher requests you can make per second per account, in the current region +Throttle rate limit for DescribeResourceScan | Each supported Region: 2 | No | The maximum number of DescribeResourceScan requests you can make per second per account, in the current region +Throttle rate limit for DescribeStackDriftDetectionStatus | Each supported Region: 2 | No | The maximum number of DescribeStackDriftDetectionStatus requests you can make per second per account, in the current region +Throttle rate limit for DescribeStackEvents | Each supported Region: 10 | No | The maximum number of DescribeStackEvents requests you can make per second per account, in the current region +Throttle rate limit for DescribeStackInstance | Each supported Region: 2 | No | The maximum number of DescribeStackInstance requests you can make per second per account, in the current region +Throttle rate limit for DescribeStackResource | Each supported Region: 20 | No | The maximum number of DescribeStackResource requests you can make per second per account, in the current region +Throttle rate limit for DescribeStackResourceDrifts | Each supported Region: 2 | No | The maximum number of DescribeStackResourceDrifts requests you can make per second per account, in the current region +Throttle rate limit for DescribeStackResources | Each supported Region: 10 | No | The maximum number of DescribeStackResources requests you can make per second per account, in the current region +Throttle rate limit for DescribeStackSet | Each supported Region: 2 | No | The maximum number of DescribeStackSet requests you can make per second per account, in the current region +Throttle rate limit for DescribeStackSetOperation | Each supported Region: 2 | No | The maximum number of DescribeStackSetOperation requests you can make per second per account, in the current region +Throttle rate limit for DescribeStacks | Each supported Region: 10 | No | The maximum number of DescribeStacks requests you can make per second per account, in the current region +Throttle rate limit for DescribeType | Each supported Region: 2 | No | The maximum number of DescribeType requests you can make per second per account, in the current region +Throttle rate limit for DescribeTypeRegistration | Each supported Region: 2 | No | The maximum number of DescribeTypeRegistration requests you can make per second per account, in the current region +Throttle rate limit for DetectStackDrift | Each supported Region: 2 | No | The maximum number of DetectStackDrift requests you can make per second per account, in the current region +Throttle rate limit for DetectStackResourceDrift | Each supported Region: 3 | No | The maximum number of DetectStackResourceDrift requests you can make per second per account, in the current region +Throttle rate limit for DetectStackSetDrift | Each supported Region: 2 | No | The maximum number of DetectStackSetDrift requests you can make per second per account, in the current region +Throttle rate limit for EstimateTemplateCost | Each supported Region: 2 | No | The maximum number of EstimateTemplateCost requests you can make per second per account, in the current region +Throttle rate limit for ExecuteChangeSet | Each supported Region: 2 | No | The maximum number of ExecuteChangeSet requests you can make per second per account, in the current region +Throttle rate limit for GetGeneratedTemplate | Each supported Region: 2 | No | The maximum number of GetGeneratedTemplate requests you can make per second per account, in the current region +Throttle rate limit for GetStackPolicy | Each supported Region: 2 | No | The maximum number of GetStackPolicy requests you can make per second per account, in the current region +Throttle rate limit for GetTemplate | Each supported Region: 10 | No | The maximum number of GetTemplate requests you can make per second per account, in the current region +Throttle rate limit for GetTemplateSummary | Each supported Region: 2 | No | The maximum number of GetTemplateSummary requests you can make per second per account, in the current region +Throttle rate limit for ListChangeSets | Each supported Region: 2 | No | The maximum number of ListChangeSets requests you can make per second per account, in the current region +Throttle rate limit for ListExports | Each supported Region: 10 | No | The maximum number of ListExports requests you can make per second per account, in the current region +Throttle rate limit for ListGeneratedTemplates | Each supported Region: 2 | No | The maximum number of ListGeneratedTemplates requests you can make per second per account, in the current region +Throttle rate limit for ListImports | Each supported Region: 2 | No | The maximum number of ListImports requests you can make per second per account, in the current region +Throttle rate limit for ListResourceScanRelatedResources | Each supported Region: 2 | No | The maximum number of ListResourceScanRelatedResources requests you can make per second per account, in the current region +Throttle rate limit for ListResourceScanResources | Each supported Region: 2 | No | The maximum number of ListResourceScanResources requests you can make per second per account, in the current region +Throttle rate limit for ListResourceScans | Each supported Region: 2 | No | The maximum number of ListResourceScans requests you can make per second per account, in the current region +Throttle rate limit for ListStackInstanceResourceDrifts | Each supported Region: 2 | No | The maximum number of ListStackInstanceResourceDrifts requests you can make per second per account, in the current region +Throttle rate limit for ListStackInstances | Each supported Region: 2 | No | The maximum number of ListStackInstances requests you can make per second per account, in the current region +Throttle rate limit for ListStackResources | Each supported Region: 10 | No | The maximum number of ListStackResources requests you can make per second per account, in the current region +Throttle rate limit for ListStackSetAutoDeploymentTargets | Each supported Region: 2 | No | The maximum number of ListStackSetAutoDeploymentTargets requests you can make per second per account, in the current region +Throttle rate limit for ListStackSetOperationResults | Each supported Region: 2 | No | The maximum number of ListStackSetOperationResults requests you can make per second per account, in the current region +Throttle rate limit for ListStackSetOperations | Each supported Region: 2 | No | The maximum number of ListStackSetOperations requests you can make per second per account, in the current region +Throttle rate limit for ListStackSets | Each supported Region: 2 | No | The maximum number of ListStackSets requests you can make per second per account, in the current region +Throttle rate limit for ListStacks | Each supported Region: 10 | No | The maximum number of ListStacks requests you can make per second per account, in the current region +Throttle rate limit for ListTypeRegistrations | Each supported Region: 2 | No | The maximum number of ListTypeRegistrations requests you can make per second per account, in the current region +Throttle rate limit for ListTypeVersions | Each supported Region: 2 | No | The maximum number of ListTypeVersions requests you can make per second per account, in the current region +Throttle rate limit for ListTypes | Each supported Region: 2 | No | The maximum number of ListTypes requests you can make per second per account, in the current region +Throttle rate limit for PublishType | Each supported Region: 2 | No | The maximum number of PublishType requests you can make per second per account, in the current region +Throttle rate limit for RegisterType | Each supported Region: 0.5 | No | The maximum number of RegisterType requests you can make per second per account, in the current region +Throttle rate limit for RollbackStack | Each supported Region: 2 | No | The maximum number of RollbackStack requests you can make per second per account, in the current region +Throttle rate limit for SetStackPolicy | Each supported Region: 2 | No | The maximum number of SetStackPolicy requests you can make per second per account, in the current region +Throttle rate limit for SetTypeDefaultVersion | Each supported Region: 2 | No | The maximum number of SetTypeDefaultVersion requests you can make per second per account, in the current region +Throttle rate limit for SignalResource | Each supported Region: 2 | No | The maximum number of SignalResource requests you can make per second per account, in the current region +Throttle rate limit for StartResourceScan | Each supported Region: 2 | No | The maximum number of StartResourceScan requests you can make per second per account, in the current region +Throttle rate limit for StopStackSetOperation | Each supported Region: 2 | No | The maximum number of StopStackSetOperation requests you can make per second per account, in the current region +Throttle rate limit for UpdateGeneratedTemplate | Each supported Region: 2 | No | The maximum number of UpdateGeneratedTemplate requests you can make per second per account, in the current region +Throttle rate limit for UpdateStack | Each supported Region: 2 | No | The maximum number of UpdateStack requests you can make per second per account, in the current region +Throttle rate limit for UpdateStackInstances | Each supported Region: 2 | No | The maximum number of UpdateStackInstances requests you can make per second per account, in the current region +Throttle rate limit for UpdateStackSet | Each supported Region: 2 | No | The maximum number of UpdateStackSet requests you can make per second per account, in the current region +Throttle rate limit for UpdateTerminationProtection | Each supported Region: 2 | No | The maximum number of UpdateTerminationProtection requests you can make per second per account, in the current region +Throttle rate limit for ValidateTemplate | Each supported Region: 2 | No | The maximum number of ValidateTemplate requests you can make per second per account, in the current region