AWS AWSCloudFormation documentation change
Summary
Added DryRunAndUpdate parameter documentation for safe canary updates
Security assessment
The DryRunAndUpdate feature improves deployment safety but does not directly address security vulnerabilities or document security-specific capabilities. It focuses on validation to prevent operational errors.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.md b/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.md index 4201c0d56..7060b4cc0 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.md +++ b//AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.md @@ -27,0 +28 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "DryRunAndUpdate" : Boolean, @@ -54,0 +56 @@ To declare this entity in your AWS CloudFormation template, use the following sy + DryRunAndUpdate: Boolean @@ -111,0 +114,15 @@ _Required_ : Yes + +`DryRunAndUpdate` + + +Specifies whether to perform a dry run before updating the canary. If set to `true`, CloudFormation will execute a dry run to validate the changes before applying them to the canary. If the dry run succeeds, the canary will be updated with the changes. If the dry run fails, the CloudFormation deployment will fail with the dry run’s failure reason. + +If set to `false` or omitted, the canary will be updated directly without first performing a dry run. The default value is `false`. + +For more information, see [Performing safe canary updates ](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/performing-safe-canary-upgrades.html). + +_Required_ : No + + _Type_ : Boolean + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)