AWS AWSCloudFormation documentation change
Summary
Added documentation for Kinesis StreamConsumer tags, new SSMGuiConnect::Preferences resource, Cognito UserPoolClient RefreshTokenRotation, and corrected a typo in Zeppelin configuration.
Security assessment
The Cognito RefreshTokenRotation addition documents a security feature (refresh token rotation) to reduce token reuse risks. SSMGuiConnect::Preferences introduces connection recording preferences, which could relate to security monitoring. No evidence of addressing a specific vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md b/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md index 8dc77244c..bae80227c 100644 --- a//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md +++ b//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md @@ -10,0 +11,15 @@ Change| Description| Date +[Updated resource](./aws-template-resource-type-ref.html#AWS_Kinesis)| The following resource was updated: AWS::Kinesis::StreamConsumer + +[AWS::Kinesis::StreamConsumer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-streamconsumer.html) + Use the `Tag` property to specify up to 50 tag key-value pairs for your Kinesis resources. +| April 29, 2025 +[New resource](./aws-template-resource-type-ref.html#AWS_SSMGuiConnect)| The following resource was added: `AWS::SSMGuiConnect::Preferences` + +[AWS::SSMGuiConnect::Preferences](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmguiconnect-preferences.html) + Use the `AWS::SSMGuiConnect::Preferences` to specify new or changed connection recording preferences for your AWS Systems Manager GUI Connect connections. +| April 29, 2025 +[Added refresh token rotation](./aws-template-resource-type-ref.html#AWS_Cognito)| Added `RefreshTokenRotation` to user pool app client resource. + +[AWS::Cognito::UserPoolClient RefreshTokenRotation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpoolclient-refreshtokenrotation.html) + You can configure your app client to also issue a new refresh token when you submit a token-refresh request for new ID and access tokens. +| April 29, 2025 @@ -5000 +5015 @@ Publish public third-party extensions| Use public extensions provided by third-p - You can use the ZeppelinApplicationConfiguration property to create Studio notebook applications that use Apache Zeppelin. You can use the notebook interactively, and you can deploy it as a continuously running streaming application with durable state and autoscaling features. + You can use the ZeppelinApplicationConfiguration property to create Studio notebook applications that use Apache Zeppelin. You can use the notebook interactively, and you can deploy it as a continuously running streaming application with durable state and auto-scaling features.