AWS managedservices high security documentation change
Summary
Added schema for Change Type ct-0z8w5t4t1ti5m (Update S3 Bucket Block Public Access) with parameters to control public access settings
Security assessment
Introduces documentation for configuring S3 Block Public Access settings, which directly addresses security controls to prevent unintended public exposure of S3 buckets. Parameters like BlockPublicAcls and RestrictPublicBuckets are security-critical configurations.
Diff
diff --git a/managedservices/latest/ctref/schemas.md b/managedservices/latest/ctref/schemas.md index ad376863b..88d9beace 100644 --- a//managedservices/latest/ctref/schemas.md +++ b//managedservices/latest/ctref/schemas.md @@ -5 +5 @@ -ct-00tlkda4242x7ct-00zr0b0ozlcn3ct-0176f0n99vcpsct-01zl37gmuk4q2ct-02ocqy2i0jx3tct-02u0hoaa9gratct-03ms1d7xrck8wct-03t7kvuwx6rgrct-03ytgoevfebjrct-042luqo63j4mxct-046aizcwg5idfct-04gzyy008v1bgct-059ewa92tc2i1ct-05muqzievnxk5ct-05yb337abq3x5ct-063qsm82cfxu6ct-06bwg93ukgg8tct-06mjngx5flwtoct-07jzw8bzd2on7ct-08avsj2e9mc7gct-08sgdn5zowyylct-09qbhy7kvtxqwct-09t6q7j9v5hrnct-0ah3gwb9seqk2ct-0aqx5t0pgfzbgct-0ary07xiajwx4ct-0attesnjqy2cxct-0biqnokj25gkdct-0bpxsrtu16igpct-0c38gftq56zj6ct-0cupn1txog5tkct-0cyqd7laxyhlmct-0el2j07llrxs7ct-0erkoad6uyvvgct-0ffvihqwjvqj1ct-0fpjlxa808sh2ct-0fqo03yizfnw6ct-0g690ekkyfm79ct-0h3p576mj4rqmct-0hahohe17csncct-0hi7z7tyikjf6ct-0hu3q3957aghjct-0idxb0xsg1ui6ct-0ikpop8zqhkxgct-0ixp4ch2tiu04ct-0jb01cofkhwk1ct-0k4b96aatyqglct-0kbey7hb00atpct-0loed9dzig1zect-0lqruajvhwsbkct-0ltm873rsebx9ct-0mss4i7neuj7fct-0o4zi9bzg74lpct-0pgvtw5rpcsb6ct-0q0bic0ywqk6cct-0q43l40hxrzumct-0qbikxr9okwvyct-0rmgrnr9w8mzhct-0tmpmp1wpgkr9ct-0tpbr6lfa3zngct-0ttx8eh3ice91ct-0vdiy51oyrhhmct-0vevjppj9eta4ct-0vzsr2nyraedlct-0wglhholzo0uwct-0wspy4o646g9pct-0x6dylrnfjgz5ct-0xdawir96cy7kct-0xi6q7uwuwrqect-0xqwmtn1hfh8uct-0ywnhc8e5k9z5ct-0zko7t3rk2efbct-0zzf0fjz76jmbct-1078jhyxq32dpct-10nh4ztyxu8kzct-10yi1sd9nst1cct-111fhplhx9axect-111r1yayblnw4ct-117rmp64d5mvbct-128svy9nn2yj8ct-12amsdz909cfhct-12lyw7otiyr6fct-12w49boaiwtzpct-13lk0noacn6uact-13swbwdxg106zct-13xvbj5pqg253ct-14027q0sjyt1hct-1404e21baa2oxct-14v49adibs4dbct-14yjom3kvpinuct-15mazjj88xc69ct-16pknsfa8lul7ct-16xg8qguovg2wct-1706xvvk6j9hfct-17cj84y7632o6ct-17vnu10suy631ct-17w6f6kzf6w51ct-1895yr1p87noqct-18fzkt86jmw1sct-18r16ldqil6w9ct-1962s5oczal9zct-1976sir132k22ct-199h35t7uz6jlct-19f40lfm5umy8ct-19fdy7np55xiuct-1a1zzgi2nb83dct-1a68ck03fn98rct-1aqsjf86w6vxgct-1ax768xtu8c9qct-1ay83wy4vxa3kct-1b8fudnqq7m8rct-1c0jrxd3su5oect-1c7ch8z5phrjpct-1d2fml15b9ethct-1d55pi44ff21uct-1d84keiri1jhgct-1dmlg9g1l91h6ct-1e0xmuy1diafqct-1e1xtak34nx76ct-1eft8s6vdhz0wct-1eiczxw8ihc18ct-1elb1vtam0ka5ct-1erytvmumckoact-1ezarc5xph3tqct-1f9hi4bephqa9ct-1fzddqrr20c2ict-1g6x4ev0hnvfnct-1gi93jhvj28egct-1h1tuxn2oxrtfct-1h5xgl9cr4bzyct-1hzofpphabs3ict-1i20abktsm05vct-1icghmq38rnsnct-1icrtx8ydvdwect-1j3503fres5a5ct-1k3oui719dcjuct-1ksyoxreh35tuct-1malj7snzxrkrct-1mrqxscu15apzct-1n323w7eu27u9ct-1n9gfnog5x7flct-1o1x2itfd6rk8ct-1opjmhuddw194ct-1oxx2g2d7hc90ct-1pvlhug439gl2ct-1pybwg08h8qszct-1q8q56cmwqj9mct-1r19m51jeijlkct-1r1vbr8ahr156ct-1taxucdyi84iyct-1urj94c3hdfu5ct-1v9g9n30woc8hct-1vbv99ko7bsrqct-1vd3y4ygbqmfkct-1vjbacfr4ufdvct-1vq0f289r36ayct-1vrnixswq1uwfct-1w8z66n899dctct-1wle0ai4en6kmct-1x66wvkjw2zp5ct-1yq7hhqse71ygct-1yqy4frl5s8y8ct-1zdasmc2ewzrsct-2019s9y3nfml4ct-2052miu12d8fnct-20san5sgtwd9ect-211l2gxvsrrhyct-220bdb8blaixfct-22cbvc1yujhecct-24pi85mjtza8kct-24rl68y07m769ct-257p9zjk14ijact-25v6r7t8gvkq5ct-26vhhlj9jmlpfct-2781aqd6f6svsct-27apldkhqr0olct-27jjy5wnrfef2ct-27tuth19k52b4ct-281dpwh9tqnanct-281et7bs9ep4sct-2aaaqid7asjy6ct-2b9q8339bj2sact-2bxelbn765ivect-2c7ve50jost1vct-2d55p1d7z6w3dct-2dphvdy1krpj6ct-2edc3sd1sqmrbct-2eof6j3mlcwhfct-2epp05svrlwodct-2fqmbyud166z9ct-2fuzb2l7hckrjct-2fzh1wckpl7f5ct-2gd0u847qd9d2ct-2ha68tpd7nr3yct-2hh93eyzmwbkdct-2hhqzgxvkcig8ct-2hhud2lx01tq7ct-2hxcllf1b4ey0ct-2hyozbpa0sx0mct-2iz9nvw8zlhstct-2j7q1hgf26x5cct-2jndrh7uit8ufct-2jvzjwunghrhyct-2lt0jeydeumpect-2mf36chtp1ejhct-2murl5xzbxoxfct-2ni31oyto1i5kct-2nyeguspp2g1lct-2oxl37nphsrjzct-2p93tyd5angmict-2paw0y79kvr3lct-2pbqoffhclpekct-2pfarpvczsstrct-2pkdckieh62psct-2ptn20pq7ur3xct-2pxyajek47am2ct-2q5azjd8p1ag5ct-2qhl8j1pjnbgnct-2qjqju7h67s7wct-2qldv4h9osmauct-2r2bffv9u6q4mct-2r9xvd3sdsic0ct-2rfzmkm6ugighct-2rnjx5yd6jgptct-2svg4k2fqi4akct-2syhk4sr7cvywct-2taqdgegqthjrct-2tqi3kjcusen4ct-2tylseo8rxfscct-2u5rcyv5h34znct-2uimt36z7j6vnct-2utx36abv83pvct-2uw99b8hpncnuct-2uzbqr7x7mekdct-2v82sp4np40kict-2w3rbmnny1qpoct-2wlfo2jxj2rkjct-2wllq61djysxzct-2wrvu4kca9xkyct-2x14cv67uym46ct-2xd2anlb5hbzoct-2y6q4vco4miypct-2yja7ihh30plyct-2z60dyvto9g6cct-2zebb2czoxpjdct-2zqwr34epwzx1ct-2zxya20wmf5bfct-3047c34zuvswhct-309eozh6lpkr8ct-30bfiwxjku1nuct-30ecvfi3tq4k3ct-30j78u6li9aqrct-31eb7rrxb7qjuct-31eyj2hlvqjwuct-33ste5yc7hprsct-34alumbtv2b9pct-34jldf2qihaicct-34sxfo53yuzahct-35p977vul06dfct-361tlo1k7339xct-361vpyun9a9ddct-369odosk0pd9wct-36cn2avfrrj9vct-36emj2uapfbu8ct-36jq7gvwyty8hct-36x3u7v2oklwdct-36zubwzxp44a4ct-379uwo67vbvngct-37bq2l9c8fzxvct-37kcp2v1mriu6ct-37qquo9wbpa8xct-37vqa0oggka3qct-38s4s4tm4ic4uct-38xcr0q86k9lhct-3929xwf222jrict-393q3yaq9ewlmct-39c5qiasbe4hect-3cp96z7r065e4ct-3cx7we852p3afct-3d0lrfb8eckuuct-3da2lxapopb86ct-3dfnglm4ombbsct-3dfubbpesm2v9ct-3dgbnh6gpst4dct-3dpd8mdd9jn1rct-3dscwaeyi6cupct-3e3h8u0sp5z80ct-3e3prksxmdhw8ct-3ebotglihggsect-3eutt7grkict4ct-3fi2cx8b83iuact-3g6fq83nxg1a7ct-3g9dbtun44malct-3gf8dolbo8x9pct-3gg0id58rn82hct-3gjfayulf5hhsct-3glr80c15rp7zct-3hox8uwjgze1fct-3j2zstluz6dxqct-3jo8yccbin4itct-3jrqmeq7j0wkect-3jx80fquylzhfct-3kh1wiizlne1ict-3kinq0u4l33zfct-3kl2d1u40lrj8ct-3l14e139i5p50ct-3lkbpansfv69kct-3ll9hnadql9s1ct-3memthlcmvc1bct-3mlsibqhugrf1ct-3mvvt2zkyveqjct-3nba0wtdugnanct-3nmhh0qr338q6ct-3oafsdbzjtuqpct-3ovo7px2vsa6nct-3oy53m1qzl2s5ct-3pc215bnwb6p7ct-3pwbixz27n3tnct-3qe6io8t6jtnyct-3r2ckznmt0a59ct-3rcl9u1k017wuct-3rd4781c2nnhpct-3rk1nl1ufn5g3ct-3rqqu43krekbyct-3s3ik03uzw19tct-3sk74t8igor0sct-3skaisgnq0pf8ct-3t4lifos8tu58ct-3u61cd4edns0xct-3u9yd8jznb2zdct-3va4bkrxb9z42ct-3vfxkiudtovm9ct-3w4lxdl3pqxob +ct-00tlkda4242x7ct-00zr0b0ozlcn3ct-0176f0n99vcpsct-01zl37gmuk4q2ct-02ocqy2i0jx3tct-02u0hoaa9gratct-03ms1d7xrck8wct-03t7kvuwx6rgrct-03ytgoevfebjrct-042luqo63j4mxct-046aizcwg5idfct-04gzyy008v1bgct-059ewa92tc2i1ct-05muqzievnxk5ct-05yb337abq3x5ct-063qsm82cfxu6ct-06bwg93ukgg8tct-06mjngx5flwtoct-07jzw8bzd2on7ct-08avsj2e9mc7gct-08sgdn5zowyylct-09qbhy7kvtxqwct-09t6q7j9v5hrnct-0ah3gwb9seqk2ct-0aqx5t0pgfzbgct-0ary07xiajwx4ct-0attesnjqy2cxct-0biqnokj25gkdct-0bpxsrtu16igpct-0c38gftq56zj6ct-0cupn1txog5tkct-0cyqd7laxyhlmct-0el2j07llrxs7ct-0erkoad6uyvvgct-0ffvihqwjvqj1ct-0fpjlxa808sh2ct-0fqo03yizfnw6ct-0g690ekkyfm79ct-0h3p576mj4rqmct-0hahohe17csncct-0hi7z7tyikjf6ct-0hu3q3957aghjct-0idxb0xsg1ui6ct-0ikpop8zqhkxgct-0ixp4ch2tiu04ct-0jb01cofkhwk1ct-0k4b96aatyqglct-0kbey7hb00atpct-0loed9dzig1zect-0lqruajvhwsbkct-0ltm873rsebx9ct-0mss4i7neuj7fct-0o4zi9bzg74lpct-0pgvtw5rpcsb6ct-0q0bic0ywqk6cct-0q43l40hxrzumct-0qbikxr9okwvyct-0rmgrnr9w8mzhct-0tmpmp1wpgkr9ct-0tpbr6lfa3zngct-0ttx8eh3ice91ct-0vdiy51oyrhhmct-0vevjppj9eta4ct-0vzsr2nyraedlct-0wglhholzo0uwct-0wspy4o646g9pct-0x6dylrnfjgz5ct-0xdawir96cy7kct-0xi6q7uwuwrqect-0xqwmtn1hfh8uct-0ywnhc8e5k9z5ct-0z8w5t4t1ti5mct-0zko7t3rk2efbct-0zzf0fjz76jmbct-1078jhyxq32dpct-10nh4ztyxu8kzct-10yi1sd9nst1cct-111fhplhx9axect-111r1yayblnw4ct-117rmp64d5mvbct-128svy9nn2yj8ct-12amsdz909cfhct-12lyw7otiyr6fct-12w49boaiwtzpct-13lk0noacn6uact-13swbwdxg106zct-13xvbj5pqg253ct-14027q0sjyt1hct-1404e21baa2oxct-14v49adibs4dbct-14yjom3kvpinuct-15mazjj88xc69ct-16pknsfa8lul7ct-16xg8qguovg2wct-1706xvvk6j9hfct-17cj84y7632o6ct-17vnu10suy631ct-17w6f6kzf6w51ct-1895yr1p87noqct-18fzkt86jmw1sct-18r16ldqil6w9ct-1962s5oczal9zct-1976sir132k22ct-199h35t7uz6jlct-19f40lfm5umy8ct-19fdy7np55xiuct-1a1zzgi2nb83dct-1a68ck03fn98rct-1aqsjf86w6vxgct-1ax768xtu8c9qct-1ay83wy4vxa3kct-1b8fudnqq7m8rct-1c0jrxd3su5oect-1c7ch8z5phrjpct-1d2fml15b9ethct-1d55pi44ff21uct-1d84keiri1jhgct-1dmlg9g1l91h6ct-1e0xmuy1diafqct-1e1xtak34nx76ct-1eft8s6vdhz0wct-1eiczxw8ihc18ct-1elb1vtam0ka5ct-1erytvmumckoact-1ezarc5xph3tqct-1f9hi4bephqa9ct-1fzddqrr20c2ict-1g6x4ev0hnvfnct-1gi93jhvj28egct-1h1tuxn2oxrtfct-1h5xgl9cr4bzyct-1hzofpphabs3ict-1i20abktsm05vct-1icghmq38rnsnct-1icrtx8ydvdwect-1j3503fres5a5ct-1jy64y7yt71m4ct-1k3oui719dcjuct-1ksyoxreh35tuct-1malj7snzxrkrct-1mrqxscu15apzct-1n323w7eu27u9ct-1n9gfnog5x7flct-1o1x2itfd6rk8ct-1opjmhuddw194ct-1oxx2g2d7hc90ct-1pvlhug439gl2ct-1pybwg08h8qszct-1q8q56cmwqj9mct-1r19m51jeijlkct-1r1vbr8ahr156ct-1taxucdyi84iyct-1urj94c3hdfu5ct-1v9g9n30woc8hct-1vbv99ko7bsrqct-1vd3y4ygbqmfkct-1vjbacfr4ufdvct-1vq0f289r36ayct-1vrnixswq1uwfct-1w8z66n899dctct-1wle0ai4en6kmct-1x66wvkjw2zp5ct-1yq7hhqse71ygct-1yqy4frl5s8y8ct-1zdasmc2ewzrsct-2019s9y3nfml4ct-2052miu12d8fnct-20san5sgtwd9ect-211l2gxvsrrhyct-220bdb8blaixfct-22cbvc1yujhecct-24pi85mjtza8kct-24rl68y07m769ct-257p9zjk14ijact-25v6r7t8gvkq5ct-26vhhlj9jmlpfct-2781aqd6f6svsct-27apldkhqr0olct-27jjy5wnrfef2ct-27tuth19k52b4ct-281dpwh9tqnanct-281et7bs9ep4sct-2aaaqid7asjy6ct-2b9q8339bj2sact-2bxelbn765ivect-2c7ve50jost1vct-2d55p1d7z6w3dct-2dphvdy1krpj6ct-2edc3sd1sqmrbct-2eof6j3mlcwhfct-2epp05svrlwodct-2fqmbyud166z9ct-2fuzb2l7hckrjct-2fzh1wckpl7f5ct-2gd0u847qd9d2ct-2ha68tpd7nr3yct-2hh93eyzmwbkdct-2hhqzgxvkcig8ct-2hhud2lx01tq7ct-2hxcllf1b4ey0ct-2hyozbpa0sx0mct-2iz9nvw8zlhstct-2j7q1hgf26x5cct-2jndrh7uit8ufct-2jvzjwunghrhyct-2lt0jeydeumpect-2mf36chtp1ejhct-2murl5xzbxoxfct-2ni31oyto1i5kct-2nyeguspp2g1lct-2oxl37nphsrjzct-2p93tyd5angmict-2paw0y79kvr3lct-2pbqoffhclpekct-2pfarpvczsstrct-2pkdckieh62psct-2ptn20pq7ur3xct-2pxyajek47am2ct-2q5azjd8p1ag5ct-2qhl8j1pjnbgnct-2qjqju7h67s7wct-2qldv4h9osmauct-2r2bffv9u6q4mct-2r9xvd3sdsic0ct-2rfzmkm6ugighct-2rnjx5yd6jgptct-2svg4k2fqi4akct-2syhk4sr7cvywct-2taqdgegqthjrct-2tqi3kjcusen4ct-2tylseo8rxfscct-2u5rcyv5h34znct-2uimt36z7j6vnct-2utx36abv83pvct-2uw99b8hpncnuct-2uzbqr7x7mekdct-2v82sp4np40kict-2w3rbmnny1qpoct-2wlfo2jxj2rkjct-2wllq61djysxzct-2wrvu4kca9xkyct-2x14cv67uym46ct-2xd2anlb5hbzoct-2y6q4vco4miypct-2yja7ihh30plyct-2z60dyvto9g6cct-2zebb2czoxpjdct-2zqwr34epwzx1ct-2zxya20wmf5bfct-3047c34zuvswhct-309eozh6lpkr8ct-30bfiwxjku1nuct-30ecvfi3tq4k3ct-30j78u6li9aqrct-31eb7rrxb7qjuct-31eyj2hlvqjwuct-33ste5yc7hprsct-34alumbtv2b9pct-34jldf2qihaicct-34sxfo53yuzahct-35p977vul06dfct-361tlo1k7339xct-361vpyun9a9ddct-369odosk0pd9wct-36cn2avfrrj9vct-36emj2uapfbu8ct-36jq7gvwyty8hct-36x3u7v2oklwdct-36zubwzxp44a4ct-379uwo67vbvngct-37bq2l9c8fzxvct-37kcp2v1mriu6ct-37qquo9wbpa8xct-37vqa0oggka3qct-38s4s4tm4ic4uct-38xcr0q86k9lhct-3929xwf222jrict-393q3yaq9ewlmct-39c5qiasbe4hect-3cp96z7r065e4ct-3cx7we852p3afct-3d0lrfb8eckuuct-3da2lxapopb86ct-3dfnglm4ombbsct-3dfubbpesm2v9ct-3dgbnh6gpst4dct-3dpd8mdd9jn1rct-3dscwaeyi6cupct-3e3h8u0sp5z80ct-3e3prksxmdhw8ct-3ebotglihggsect-3eutt7grkict4ct-3fi2cx8b83iuact-3g6fq83nxg1a7ct-3g9dbtun44malct-3gf8dolbo8x9pct-3gg0id58rn82hct-3gjfayulf5hhsct-3glr80c15rp7zct-3hox8uwjgze1fct-3j2zstluz6dxqct-3jo8yccbin4itct-3jrqmeq7j0wkect-3jx80fquylzhfct-3kh1wiizlne1ict-3kinq0u4l33zfct-3kl2d1u40lrj8ct-3l14e139i5p50ct-3lkbpansfv69kct-3ll9hnadql9s1ct-3memthlcmvc1bct-3mlsibqhugrf1ct-3mvvt2zkyveqjct-3nba0wtdugnanct-3nmhh0qr338q6ct-3oafsdbzjtuqpct-3ovo7px2vsa6nct-3oy53m1qzl2s5ct-3pc215bnwb6p7ct-3pwbixz27n3tnct-3qe6io8t6jtnyct-3r2ckznmt0a59ct-3rcl9u1k017wuct-3rd4781c2nnhpct-3rk1nl1ufn5g3ct-3rqqu43krekbyct-3s3ik03uzw19tct-3sk74t8igor0sct-3skaisgnq0pf8ct-3t4lifos8tu58ct-3u61cd4edns0xct-3u9yd8jznb2zdct-3va4bkrxb9z42ct-3vfxkiudtovm9ct-3w4lxdl3pqxob @@ -5455 +5455,4 @@ Change type schemas specify the execution input parameters for a change type. - "enum": ["True","False"], + "enum": [ + "True", + "False" + ], @@ -5466 +5469,4 @@ Change type schemas specify the execution input parameters for a change type. - "enum": ["True","False"], + "enum": [ + "True", + "False" + ], @@ -9396,0 +9402,93 @@ Change type schemas specify the execution input parameters for a change type. +## Schema for Change Type ct-0z8w5t4t1ti5m + +###### Classifications: + + * [Management | Advanced stack components | S3 storage | Update public access](./management-advanced-s3-storage-update-public-access.html) + + + + + + { + "$schema": "http://json-schema.org/draft-04/schema#", + "name": "Update S3 Bucket Block Public Access", + "description": "Update the existing S3 Block Public Access setting for a specified bucket. Block Public Access for S3 buckets defaults to 'true' at account level when your account is created. This setting overrides policies, roles, ACLs, and access points that might allow public access to buckets in that account.", + "type": "object", + "properties": { + "DocumentName": { + "description": "Must be AWSManagedServices-UpdateBlockPublicAccess.", + "type": "string", + "enum": [ + "AWSManagedServices-UpdateBlockPublicAccess" + ], + "default": "AWSManagedServices-UpdateBlockPublicAccess" + }, + "Region": { + "description": "The AWS Region in which the resource is located, in the form us-east-1.", + "type": "string", + "pattern": "^([a-z]{2}((-gov))?-[a-z]+-\\d{1})$" + }, + "Parameters": { + "type": "object", + "properties": { + "BucketName": { + "description": "(Required) The name of the S3 bucket for which to manage the public access setting.", + "type": "array", + "items": { + "type": "string", + "pattern": "^(?!(mc|ams|awsms)-)[a-z0-9][-.a-z0-9]{1,61}[a-z0-9]$" + }, + "minItems": 1, + "maxItems": 1 + }, + "RestrictPublicBuckets": { + "type": "boolean", + "description": "(Optional) Specifies whether Amazon S3 should restrict public bucket policies for this bucket. Setting this element to TRUE restricts access to this bucket to only AWS services and authorized users within this account if the bucket has a public policy.", + "default": true + }, + "BlockPublicAcls": { + "type": "boolean", + "description": "(Optional) Specifies whether Amazon S3 should block public access control lists (ACLs) for this bucket and objects in this bucket.", + "default": true + }, + "IgnorePublicAcls": { + "type": "boolean", + "description": "(Optional) Specifies whether Amazon S3 should ignore public ACLs for this bucket and objects in this bucket. Setting this element to TRUE causes Amazon S3 to ignore all public ACLs on this bucket and objects in this bucket.", + "default": true + }, + "BlockPublicPolicy": { + "type": "boolean", + "description": "(Optional) Specifies whether Amazon S3 should block public bucket policies for this bucket. Setting this element to TRUE causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access.", + "default": true + } + }, + "metadata": { + "ui:order": [ + "BucketName", + "BlockPublicAcls", + "IgnorePublicAcls", + "BlockPublicPolicy", + "RestrictPublicBuckets" + ] + }, + "additionalProperties": false, + "required": [ + "BucketName" + ] + } + }, + "metadata": { + "ui:order": [ + "DocumentName", + "Region", + "Parameters" + ] + }, + "additionalProperties": false, + "required": [ + "DocumentName", + "Region", + "Parameters" + ] + } + @@ -13896 +13994 @@ Change type schemas specify the execution input parameters for a change type. - "description": "Delete up to 20 security groups. Note: Only security groups with no dependencies are deleted and security groups with dependencies are not deleted. This change type does not require a review and can be used instead of the manual, review required, change type (ct-3cp96z7r065e4).", + "description": "Delete up to 20 security groups. Note: Only security groups with no dependencies are deleted. If one or more security groups have dependencies, the operation fails. This change type does not require a review and can be used instead of the manual, review required, change type (ct-3cp96z7r065e4).", @@ -18417,0 +18516,83 @@ Change type schemas specify the execution input parameters for a change type. +## Schema for Change Type ct-1jy64y7yt71m4 + +###### Classifications: + + * [Deployment | Advanced stack components | Resource Access Manager (RAM) | Create resolver rule share](./deployment-advanced-resource-access-manager-ram-create-resolver-rule-share.html) + + + + + + { + "$schema": "http://json-schema.org/draft-04/schema#", + "name": "Create resolver rule share", + "description": "Create a resource share through Resource Access Manager(RAM) to share up to 20 Route53 resolver rules. You can share resources with AWS accounts that come under the same customer contract. If you are in an organization, you can share with that organization's organizational units or with the entire organization.", + "type": "object", + "properties": { + "DocumentName": { + "description": "Must be AWSManagedServices-CreateResolverRulesShare.", + "type": "string", + "enum": [ + "AWSManagedServices-CreateResolverRulesShare" + ], + "default": "AWSManagedServices-CreateResolverRulesShare" + }, + "Region": { + "description": "The AWS Region in which the resource is located, in the form us-east-1.", + "type": "string", + "pattern": "^([a-z]{2}((-gov))?-[a-z]+-\\d{1})$" + }, + "Parameters": { + "type": "object", + "properties": { + "ResourceShareName": { + "description": "A meaningful name for the resource share.", + "type": "string", + "pattern": "^(?!(?:ams|mc-|com.amazonaws))([a-zA-Z0-9._ -]){1,255}$" + }, + "ResolverRuleIds": { + "description": "The list of resolver rule IDs to share with the target principal.", + "type": "array", + "items": { + "type": "string", + "pattern": "^(rslvr-rr-)[a-zA-Z0-9]{1,64}$" + }, + "minItems": 1, + "maxItems": 20 + }, + "Principal": { + "description": "The ID of the principal to share the resources with. To share the resources with your entire organization, use 'organization'. To share the resources with an AWS account or an organizational unit (OU), use the account ID or OU ID.", + "type": "string", + "pattern": "^ou-[0-9a-z]{4,32}-[0-9a-z]{8,32}$|^[0-9]{12}$|^organization$" + } + }, + "metadata": { + "ui:order": [ + "ResourceShareName", + "ResolverRuleIds", + "Principal" + ] + }, + "additionalProperties": false, + "required": [ + "ResourceShareName", + "ResolverRuleIds", + "Principal" + ] + } + }, + "metadata": { + "ui:order": [ + "DocumentName", + "Region", + "Parameters" + ] + }, + "additionalProperties": false, + "required": [ + "DocumentName", + "Region", + "Parameters" + ] + } +