AWS AWSCloudFormation documentation change
Summary
Updated documentation links to TemplateReference and modified section header from 'Get exported outputs' to 'Get AWS values'. Added PDF reference link.
Security assessment
The changes involve documentation structure and URL updates. The content continues to describe security considerations for secrets management but does not address a specific security vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/dynamic-references-secretsmanager.md b/AWSCloudFormation/latest/UserGuide/dynamic-references-secretsmanager.md index 768e073fd..d25e40fed 100644 --- a//AWSCloudFormation/latest/UserGuide/dynamic-references-secretsmanager.md +++ b//AWSCloudFormation/latest/UserGuide/dynamic-references-secretsmanager.md @@ -0,0 +1,2 @@ +[](/pdfs/AWSCloudFormation/latest/UserGuide/cfn-ug.pdf#dynamic-references-secretsmanager "Open PDF") + @@ -19 +21 @@ When using `secretsmanager` dynamic references, there are a few important securi -For example, suppose in your template you specify the `MasterPassword` property of an [AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html) resource to be a `secretsmanager` dynamic reference, and then create a stack from the template. You later update that secret's value in Secrets Manager, but don't update the `AWS::RDS::DBInstance` resource in your template. In this case, even if you perform a stack update, the secret value in the `MasterPassword` property isn't updated, and remains the previous secret value. +For example, suppose in your template you specify the `MasterPassword` property of an [AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html) resource to be a `secretsmanager` dynamic reference, and then create a stack from the template. You later update that secret's value in Secrets Manager, but don't update the `AWS::RDS::DBInstance` resource in your template. In this case, even if you perform a stack update, the secret value in the `MasterPassword` property isn't updated, and remains the previous secret value. @@ -91 +93 @@ This segment may not include the colon character ( `:`). -The following [AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html) example retrieves the user name and password values stored in the ``MySecret`` secret. The secret version retrieved is the version with the version stage value of `AWSCURRENT`. +The following [AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html) example retrieves the user name and password values stored in the ``MySecret`` secret. The secret version retrieved is the version with the version stage value of `AWSCURRENT`. @@ -162 +164 @@ Get Systems Manager secure string -Get exported outputs +Get AWS values