AWS AWSCloudFormation medium security documentation change
Summary
Updated AWS::APS::Workspace resource to include LoggingDestination, LoggingFilter, and QueryLoggingConfiguration properties linked to encryption at rest documentation
Security assessment
The addition of properties related to logging and encryption at rest directly addresses security controls for data protection.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md b/AWSCloudFormation/latest/UserGuide/ReleaseHistory.md index f59098b4a..2f583910f 100644 --- a//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md +++ b//AWSCloudFormation/latest/UserGuide/ReleaseHistory.md @@ -10,0 +11,5 @@ Change| Description| Date +[Updated resource](./aws-template-resource-type-ref.html#AWS_CloudTrail)| The following structure was added: AWS::CloudTrail::EventDataStore ContextKeySelector + +[AWS::CloudTrail::EventDataStore ContextKeySelector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-eventdatastore-contextkeyselector.html) + A structure that defines criteria for filtering events based on specific context key values in the event record. +| May 19, 2025 @@ -35,0 +41,5 @@ Change| Description| Date +[Updated resource ](./aws-template-resource-type-ref.html#AWS_APS)| The following resource was updated: AWS::APS::Workspace. + +[AWS::APS::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-workspace.html) + The AWS::APS::Workspace resource was updated to include the `LoggingDestination`, `LoggingFilter`, and `QueryLoggingConfiguration` properties. For more information, see [Encryption at rest](https://docs.aws.amazon.com/prometheus/latest/userguide/encryption-at-rest-Amazon-Service-Prometheus.html) in the _Amazon Managed Service for Prometheus User Guide_. +| May 5, 2025 @@ -41,5 +50,0 @@ Change| Description| Date -[Updated resource](./aws-template-resource-type-ref.html#AWS_Kinesis)| The following resource was updated: AWS::Kinesis::StreamConsumer - -[AWS::Kinesis::StreamConsumer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-streamconsumer.html) - Use the `Tag` property to specify up to 50 tag key-value pairs for your Kinesis resources. -| April 29, 2025 @@ -81,4 +86 @@ Change| Description| Date -[Updated resource](./aws-template-resource-type-ref.html#AWS_Batch)| The following resources were added or updated: `AWS::Batch::JobDefinition FirelensConfiguration` and `AWS::Batch::JobDefinition TaskContainerProperties`.The following resources were added or updated: - - * [`AWS::Batch::JobDefinition FirelensConfiguration`. ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-consumableresource.html) Configure Firelens logging. - * [ AWS::Batch::JobDefinition TaskContainerProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-consumableresourceproperties.html) Configure Firelens logging for a container. +[Updated resource](./aws-template-resource-type-ref.html#AWS_Kinesis)| The following resource was updated: AWS::Kinesis::StreamConsumer @@ -85,0 +88,2 @@ Change| Description| Date +[AWS::Kinesis::StreamConsumer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-streamconsumer.html) + Use the `Tag` property to specify up to 50 tag key-value pairs for your Kinesis resources. @@ -87,9 +90,0 @@ Change| Description| Date -[New resources](./aws-template-resource-type-ref.html#AWS_MemoryDB)| The following resources were added for the IPv6 update: AWS::MemoryDB::Cluster and AWS::MemoryDB::SubnetGroup.SupportedNetworkTypes. - -[AWS::MemoryDB::SubnetGroup.SupportedNetworkTypes](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-subnetgroup.html) - Use the `SupportedNetworkTypes` resource to list network types for the subnet group. -[AWS::MemoryDB::Cluster.IpDiscovery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-cluster.html#cfn-memorydb-cluster-ipdiscovery) - Use the `IpDiscovery` resource to discover IP addresses for the cluster. -[AWS::MemoryDB::Cluster.NetworkType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-cluster.html#cfn-memorydb-cluster-networktype) - Use the `NetworkType` to choose the IP address type for the cluster. -| April 10, 2025 @@ -152,7 +146,0 @@ IaC generator supports partial scanning| You can now choose specific resource ty -[Updated resource](./aws-template-resource-type-ref.html#AWS_Batch)| The following resources were added or updated: `AWS::Batch::ConsumableResource` and `AWS::Batch:JobDefinition`.The following resources were added or updated: - - * [`AWS::Batch::ConsumableResource`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-consumableresource.html) - * [ AWS::Batch::JobDefinition ConsumableResourceProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-consumableresourceproperties.html) Contains a list of consumable resources required by a job. - * [ AWS::Batch::JobDefinition ConsumableResourceRequirement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-consumableresourcerequirement.html) Information about a consumable resource required to run a job. - -| February 27, 2025 @@ -184 +171,0 @@ IaC generator supports partial scanning| You can now choose specific resource ty -[Rebrand update](./aws-template-resource-type-ref.html#AWS_Chatbot)| AWS Chatbot is now Amazon Q Developer. Mentions of the name AWS Chatbot still appear in this guide.[Learn more](https://docs.aws.amazon.com/chatbot/latest/adminguide/service-rename.html)| February 17, 2025 @@ -225,5 +211,0 @@ IaC generator supports partial scanning| You can now choose specific resource ty -[Updated resource](./aws-template-resource-type-ref.html#AWS_QBusiness)| The following resource was updated: `AWS::QBusiness::WebExperience`. - -[AWS::QBusiness::WebExperience](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-webexperience.html) - Use the `BrowserExtensionConfiguration` property to configure the browser extension for your Amazon Q Business application environment. -| January 28, 2025 @@ -355,2 +337,2 @@ AWS::NotificationsContacts::EmailContact -[ AWS::QBusiness::DataAccessor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-dataaccessor.html) - Use the `AWS::QBusiness::DataAccessor` resource to create an Amazon Q Business data accessor. For more information, see [Data Accessors](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/data-accessors.html). +[ AWS::QBusiness::DataAccessor](https://docs.aws.amazon.com/AWSCloudFormation/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-dataaccessor.html) + Use the `AWS::QBusiness::DataAccessor` resource to create an Amazon Q Business data accessor. For more information, see [Data Accessors](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/data-accessors.html.html). @@ -450,9 +431,0 @@ AWS::NotificationsContacts::EmailContact -[New resource added and properties updated](./aws-template-resource-type-ref.html#AWS_Chatbot)| The following resource and properties were updated: AWS::Chatbot::CustomAction AWS::Chatbot::SlackChannelConfiguration AWS::Chatbot::MicrosoftTeamsChannelConfiguration - -[AWS::Chatbot::CustomAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-customaction.html) - Use the `AWS::Chatbot::CustomAction` resource to configure a custom action with Amazon Q Developer. -[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-slackchannelconfiguration.html) - Use the `CustomizationResourceArns` property to link a of list resource ARNs (for example, custom actions) with a Slack channel configuration for Amazon Q Developer. -[AWS::Chatbot::MicrosoftTeamsChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-microsoftteamschannelconfiguration.html.html) - Use the `CustomizationResourceArns` property to link a list resource ARNs (for example, custom actions) with a Microsoft Teams channel configuration for Amazon Q Developer. -| November 22, 2024 @@ -464,5 +436,0 @@ AWS::NotificationsContacts::EmailContact -[New resource](./aws-template-resource-type-ref.html#AWS_ResourceGroups)| The following resource was added: AWS::ResourceGroups::TagSyncTask - -[AWS::ResourceGroups::TagSyncTask](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-group.html) - Use the `AWS::ResourceGroups::TagSyncTask` resource to onboard and sync resources tagged with a specific tag key-value pair to an application. -| November 22, 2024 @@ -1024,5 +991,0 @@ AWS CloudTrail event stack operation root causes| AWS CloudFormation improves th -[Updated resource](./aws-template-resource-type-ref.html#AWS_Oam)| The following resources was updated: AWS::Oam::Link. - -[AWS::Oam::Link](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-oam-link.html) - The `AWS::Oam::Link` resource was updated with a `LinkConfiguration` structure. You can use this structure to specify that only a subset of metric namespaces or log groups are to be shared with the monitoring account. -| April 26, 2024 @@ -1987,5 +1949,0 @@ AWS CloudTrail event stack operation root causes| AWS CloudFormation improves th -[Updated resource](./aws-template-resource-type-ref.html#AWS_NetworkManager)| AWS::NetworkManager::ConnectPeer was updated. - -[AWS::NetworkManager::ConnectPeer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-connectpeer.html) - Use the `SubnetArn` property to specify the subnet ARN of a Connect peer. -| August 23, 2023 @@ -4292,4 +4250,4 @@ CloudFormation registry| AWS CloudFormation announces the general availability o -[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-slackchannelconfiguration.html) - Use the `GuardrailPolicies` property to list policy ARNs applied as channel guardrails for Amazon Q Developer. -[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-slackchannelconfiguration.html) - Use the `UserRoleRequired` property to enable the use of a user role requirement in Amazon Q Developer configurations. +[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Chatbot.html) + Use the `GuardrailPolicies` property to list policy ARNs applied as channel guardrails for Amazon Q Developer in chat applications. +[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Chatbot.html) + Use the `UserRoleRequired` property to enable the use of a user role requirement in Amazon Q Developer in chat applications configurations. @@ -5050 +5008 @@ Publish public third-party extensions| Use public extensions provided by third-p - You can use the ZeppelinApplicationConfiguration property to create Studio notebook applications that use Apache Zeppelin. You can use the notebook interactively, and you can deploy it as a continuously running streaming application with durable state and auto-scaling features. + You can use the ZeppelinApplicationConfiguration property to create Studio notebook applications that use Apache Zeppelin. You can use the notebook interactively, and you can deploy it as a continuously running streaming application with durable state and autoscaling features. @@ -7093,2 +7051,2 @@ AWS CloudFormation StackSets Region availability| AWS CloudFormation StackSets i -[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-slackchannelconfiguration.html) - Use the `AWS::Chatbot::SlackChannelConfiguration` resource to configure a Slack channel with Amazon Q Developer. +[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Chatbot.html) + Use the `AWS::Chatbot::SlackChannelConfiguration` resource to configure a Slack channel with Amazon Q Developer in chat applications.