AWS AWSCloudFormation high security documentation change
Summary
Added documentation for AWS::ECR::RegistryScanningConfiguration and AWS::Oam::Link updates, including scanning configuration and data sharing controls. Updated formatting for other ECR resource lists.
Security assessment
The AWS::ECR::RegistryScanningConfiguration addition enables image vulnerability scanning for private registries, a critical security feature. The AWS::Oam::Link update introduces granular control over shared metric/log data, reducing exposure risks. Both changes directly address security capabilities.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md b/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md index eaccb24d8..187627f0b 100644 --- a//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md +++ b//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md @@ -36,0 +37,5 @@ Change| Description| Date +[New resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were added: + +[AWS::ECR::RegistryScanningConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registryscanningconfiguration.html) + Use the `AWS::ECR::RegistryScanningConfiguration` property to specify a scanning configuration for your private registry. +| April 1, 2025 @@ -948,0 +954,5 @@ AWS CloudTrail event stack operation root causes| AWS CloudFormation improves th +[Updated resource](./aws-template-resource-type-ref.html#AWS_Oam)| The following resources was updated: AWS::Oam::Link. + +[AWS::Oam::Link](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-oam-link.html) + The `AWS::Oam::Link` resource was updated with a `LinkConfiguration` structure. You can use this structure to specify that only a subset of metric namespaces or log groups are to be shared with the monitoring account. +| April 26, 2024 @@ -1531 +1541 @@ AWS CloudTrail event stack operation root causes| AWS CloudFormation improves th -[New resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: AWS::ECR::PullThroughCacheRule +[New resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: @@ -4051 +4061 @@ You can also use the `AWS::KMS::ReplicaKey` resource to create a replica of a mu -[New resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were added: AWS::ECR::PullThroughCacheRule +[New resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were added: @@ -4620 +4630 @@ TagMap -[Updated resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: AWS::ECR::ReplicationConfiguration +[Updated resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: @@ -5118 +5128 @@ Publish public third-party extensions| Use public extensions provided by third-p -[Updated resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: AWS::ECR::Repository +[Updated resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: @@ -5419 +5429 @@ AWS CloudFormation StackSets now supports parallel region deployment| You can no -[Updated resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: AWS::ECR::PublicRepository +[Updated resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: @@ -5698 +5708 @@ AWS CloudFormation StackSets Region availability| AWS CloudFormation StackSets i -[Updated resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: AWS::ECR::ReplicationConfiguration +[Updated resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were updated: @@ -5968 +5978 @@ AWS CloudFormation StackSets Region availability| AWS CloudFormation StackSets i -[New resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were added: AWS::ECR::PublicRepository +[New resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were added: