AWS AWSCloudFormation documentation change
Summary
Updated documentation links and maintained drift detection limitations for sensitive properties
Security assessment
Changes only update template reference URLs and maintain existing text about drift detection exclusions for sensitive data (like IAM passwords). While the documentation mentions security-sensitive properties being excluded from drift detection, this is not a new addition - the change merely preserves existing security-related information with updated links.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.md b/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.md index fa17ed5d0..74d1551b2 100644 --- a//AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.md +++ b//AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.md @@ -0,0 +1,2 @@ +[](/pdfs/AWSCloudFormation/latest/UserGuide/cfn-ug.pdf#using-cfn-stack-drift "Open PDF") + @@ -137 +139 @@ Resource type | Attachment resource type -For example, CloudFormation cannot map the source code of a Lambda function back to the [Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html) property type of the [AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html) resource, and therefore CloudFormation can't include it in drift detection results. +For example, CloudFormation cannot map the source code of a Lambda function back to the [Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-function-code.html) property type of the [AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-function.html) resource, and therefore CloudFormation can't include it in drift detection results. @@ -141 +143 @@ For example, CloudFormation cannot map the source code of a Lambda function back -There are certain property values that, by design, are never returned by the service to which the resource belongs. These tend to contain confidential information, such as passwords or other sensitive data that shouldn't be exposed. For example, the IAM service will never return the value of the `Password` property of the [AWS::IAM::User LoginProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user-loginprofile.html) property type, and therefore CloudFormation can't include it in drift detection results. +There are certain property values that, by design, are never returned by the service to which the resource belongs. These tend to contain confidential information, such as passwords or other sensitive data that shouldn't be exposed. For example, the IAM service will never return the value of the `Password` property of the [AWS::IAM::User LoginProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-iam-user-loginprofile.html) property type, and therefore CloudFormation can't include it in drift detection results.