AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-05-01 · Documentation low

File: AWSCloudFormation/latest/UserGuide/stack-refactoring.md

Summary

Added multiple AWS resource types to the list of resources with limitations during stack refactoring, including security-related services like GuardDuty, Cognito, and ACMPCA resources.

Security assessment

The changes only document limitations for specific resource types during stack refactoring. While some added resources (e.g., GuardDuty, Cognito) are security services, the documentation update does not address vulnerabilities or security features - it simply lists refactoring constraints.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/stack-refactoring.md b/AWSCloudFormation/latest/UserGuide/stack-refactoring.md
index 432223ca9..ee6e3f1ae 100644
--- a//AWSCloudFormation/latest/UserGuide/stack-refactoring.md
+++ b//AWSCloudFormation/latest/UserGuide/stack-refactoring.md
@@ -53,0 +54,16 @@ Consider the following limitations when planning your stack refactor:
+    * `AWS::ACMPCA::Certificate`
+
+    * `AWS::ACMPCA::CertificateAuthority`
+
+    * `AWS::ACMPCA::CertificateAuthorityActivation`
+
+    * `AWS::ApiGateway::BasePathMapping`
+
+    * `AWS::ApiGateway::Method`
+
+    * `AWS::AppConfig::ConfigurationProfile`
+
+    * `AWS::AppConfig::Deployment`
+
+    * `AWS::AppConfig::Environment`
+
@@ -57,0 +74,8 @@ Consider the following limitations when planning your stack refactor:
+    * `AWS::AppStream::DirectoryConfig`
+
+    * `AWS::AppStream::StackFleetAssociation`
+
+    * `AWS::AppStream::StackUserAssociation`
+
+    * `AWS::AppStream::User`
+
@@ -59,0 +84,10 @@ Consider the following limitations when planning your stack refactor:
+    * `AWS::CodePipeline::CustomActionType`
+
+    * `AWS::Cognito::UserPoolRiskConfigurationAttachment`
+
+    * `AWS::Cognito::UserPoolUICustomizationAttachment`
+
+    * `AWS::Cognito::UserPoolUserToGroupAttachment`
+
+    * `AWS::Config::ConfigRule`
+
@@ -71,0 +106,24 @@ Consider the following limitations when planning your stack refactor:
+    * `AWS::DataZone::DataSource`
+
+    * `AWS::DataZone::Environment`
+
+    * `AWS::DataZone::EnvironmentBlueprintConfiguration`
+
+    * `AWS::DataZone::EnvironmentProfile`
+
+    * `AWS::DataZone::Project`
+
+    * `AWS::DataZone::SubscriptionTarget`
+
+    * `AWS::DynamoDB::GlobalTable`
+
+    * `AWS::EC2::LaunchTemplate`
+
+    * `AWS::EC2::SpotFleet`
+
+    * `AWS::EC2::VolumeAttachment`
+
+    * `AWS::EC2::VPCDHCPOptionsAssociation`
+
+    * `AWS::ElasticBeanstalk::ConfigurationTemplate`
+
@@ -73,0 +132,26 @@ Consider the following limitations when planning your stack refactor:
+    * `AWS::Glue::Schema`
+
+    * `AWS::GuardDuty::IPSet`
+
+    * `AWS::GuardDuty::PublishingDestination`
+
+    * `AWS::GuardDuty::ThreatIntelSet`
+
+    * `AWS::ImageBuilder::Component`
+
+    * `AWS::IoTFleetWise::Campaign`
+
+    * `AWS::IoTWireless::WirelessDeviceImportTask`
+
+    * `AWS::Lambda::EventInvokeConfig`
+
+    * `AWS::Lex::BotVersion`
+
+    * `AWS::M2::Application`
+
+    * `AWS::Maester::DocumentType`
+
+    * `AWS::MediaTailor::Channel`
+
+    * `AWS::MSK::Configuration`
+
@@ -75,0 +160,2 @@ Consider the following limitations when planning your stack refactor:
+    * `AWS::NeptuneGraph::PrivateGraphEndpoint`
+
@@ -84 +170,31 @@ Consider the following limitations when planning your stack refactor:
-    * `AWS::Route53::RecordSetGroup`
+    * `AWS::Panorama::PackageVersion`
+
+    * `AWS::PCAConnectorAD::Connector`
+
+    * `AWS::PCAConnectorAD::DirectoryRegistration`
+
+    * `AWS::PCAConnectorAD::Template`
+
+    * `AWS::PCAConnectorAD::TemplateGroupAccessControlEntry`
+
+    * `AWS::QuickSight::Theme`
+
+    * `AWS::RefactorSpaces::Environment`
+
+    * `AWS::RefactorSpaces::Route`
+
+    * `AWS::RefactorSpaces::Service`
+
+    * `AWS::RoboMaker::RobotApplication`
+
+    * `AWS::RoboMaker::SimulationApplication`
+
+    * `AWS::SageMaker::InferenceComponen`
+
+    * `AWS::ServiceCatalog::PortfolioPrincipalAssociation`
+
+    * `AWS::ServiceCatalog::PortfolioProductAssociation`
+
+    * `AWS::ServiceCatalog::PortfolioShare`
+
+    * `AWS::ServiceCatalog::TagOptionAssociation`
@@ -86 +202 @@ Consider the following limitations when planning your stack refactor:
-    * `AWS::SageMaker::DataQualityJobDefinition`
+    * `AWS::ServiceCatalogAppRegistry::AttributeGroupAssociation`
@@ -88 +204 @@ Consider the following limitations when planning your stack refactor:
-    * `AWS::SageMaker::FeatureGroup`
+    * `AWS::ServiceCatalogAppRegistry::ResourceAssociation`
@@ -90 +206 @@ Consider the following limitations when planning your stack refactor:
-    * `AWS::SageMaker::ModelBiasJobDefinition`
+    * `AWS::StepFunctions::StateMachineVersion`
@@ -92 +208 @@ Consider the following limitations when planning your stack refactor:
-    * `AWS::SageMaker::ModelExplainabilityJobDefinition`
+    * `AWS::Synthetics::Canary`
@@ -94 +210 @@ Consider the following limitations when planning your stack refactor:
-    * `AWS::SageMaker::ModelQualityJobDefinition`
+    * `AWS::VoiceID::Domain`