AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-05-01 · Documentation low

File: AWSCloudFormation/latest/UserGuide/ReleaseHistory.md

Summary

Added documentation for new CloudFront resources (ConnectionGroup, DistributionTenant), updated ECR RegistryScanningConfiguration entry with corrected date, and removed duplicate ECR entry.

Security assessment

The addition of AWS::ECR::RegistryScanningConfiguration explicitly documents a security feature (image scanning configuration). While CloudFront multi-tenant resources involve security aspects, the changes lack explicit evidence of addressing a security vulnerability.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md b/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md
index 187627f0b..8dc77244c 100644
--- a//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md
+++ b//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md
@@ -10,0 +11,25 @@ Change| Description| Date
+[Updated resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was updated: AWS::CloudFront::Distribution
+
+[AWS::CloudFront::Distribution TenantConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-tenantconfig.html)
+     For more information, see [Understand how multi-tenant distributions work](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html) in the _Amazon CloudFront Developer Guide_.
+| April 28, 2025  
+[New resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was added: AWS::CloudFront::ConnectionGroup
+
+[AWS::CloudFront::ConnectionGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-connectiongroup.html)
+     Use the `AWS::CloudFront::ConnectionGroup` resource to create an Amazon CloudFront connection group. For more information, see [Understand how multi-tenant distributions work](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html) in the _Amazon CloudFront Developer Guide_.
+| April 28, 2025  
+[New resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was added: AWS::CloudFront::DistributionTenant
+
+[AWS::CloudFront::DistributionTenant](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distributiontenant.html)
+     Use the `AWS::CloudFront::DistributionTenant` resource to create an Amazon CloudFront distribution tenant. You can create a distribution tenant from your multi-tenant distribution. For more information, see [Understand how multi-tenant distributions work](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html) in the _Amazon CloudFront Developer Guide_.
+| April 28, 2025  
+[New resources](./aws-template-resource-type-ref.html#AWS_DSQL)| The following resources were added: `AWS::DSQL::Cluster`.
+
+[AWS::DSQL::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html)
+     Use the `AWS::DSQL::Cluster` resource to create a cluster in Amazon Aurora DSQL.
+| April 25, 2025  
+[New resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were added:
+
+[AWS::ECR::RegistryScanningConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registryscanningconfiguration.html)
+     Use the `AWS::ECR::RegistryScanningConfiguration` property to specify a scanning configuration for your private registry.
+| April 25, 2025  
@@ -37,5 +61,0 @@ Change| Description| Date
-[New resources](./aws-template-resource-type-ref.html#AWS_ECR)| The following resources were added:
-
-[AWS::ECR::RegistryScanningConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registryscanningconfiguration.html)
-     Use the `AWS::ECR::RegistryScanningConfiguration` property to specify a scanning configuration for your private registry.
-| April 1, 2025  
@@ -135 +155 @@ IaC generator supports partial scanning| You can now choose specific resource ty
-[Updated resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was updated: `AWS::CloudFront::Distribution`
+[Updated resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was updated: AWS::CloudFront::Distribution 
@@ -140 +160 @@ IaC generator supports partial scanning| You can now choose specific resource ty
-[New resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was added: AWS::CloudFront::VpcOrigin.
+[New resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was added: AWS::CloudFront::VpcOrigin
@@ -224 +244 @@ AWS::NotificationsContacts::EmailContact
-[Updated resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was updated: `AWS::CloudFront::Distribution`
+[Updated resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was updated: AWS::CloudFront::Distribution
@@ -229 +249 @@ AWS::NotificationsContacts::EmailContact
-[New resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was added: AWS::CloudFront::AnycastIpList.
+[New resource](./aws-template-resource-type-ref.html#AWS_CloudFront)| The following resource was added: AWS::CloudFront::AnycastIpList