AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-05-03 · Documentation low

File: AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.md

Summary

Updated image recipe documentation to clarify parent image sources and component limits.

Security assessment

General documentation improvements for image recipe configuration. SSM parameter support could relate to secure parameter storage but is not explicitly framed as a security feature in the changes.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.md b/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.md
index da0ee6a59..fb5e1f378 100644
--- a//AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.md
+++ b//AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.md
@@ -7 +7 @@ SyntaxPropertiesReturn valuesExamplesSee also
-An Image Builder image recipe is a document that defines the base image and the components to be applied to the base image to produce the desired configuration for the output image. You can use an image recipe to duplicate builds. Image Builder image recipes can be shared, branched, and edited using the console wizard, the AWS CLI, or the API. You can use image recipes with your version control software to maintain shareable versioned image recipes.
+Creates a new image recipe. Image recipes define how images are configured, tested, and assessed.
@@ -79 +79 @@ _Required_ : No
-The components of the image recipe. Components are orchestration documents that define a sequence of steps for downloading, installing, configuring, and testing software packages. They also define validation and security hardening steps. A component is defined using a YAML document format.
+The components that are included in the image recipe. Recipes require a minimum of one build component, and can have a maximum of 20 build and test components in any combination.
@@ -120 +120,12 @@ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/
-The parent image of the image recipe. The string must be either an Image ARN or an AMI ID.
+The base image for customizations specified in the image recipe. You can specify the parent image using one of the following options:
+
+  * AMI ID
+
+  * Image Builder image Amazon Resource Name (ARN)
+
+  * AWS Systems Manager (SSM) Parameter Store Parameter, prefixed by `ssm:`, followed by the parameter name or ARN.
+
+  * AWS Marketplace product ID
+
+
+
@@ -148 +159 @@ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/
-The semantic version of the image recipe.
+The version of the image recipe.