AWS config documentation change
Summary
Updated console URL and added clarification about CloudFormation intrinsic function limitations
Security assessment
Clarifies secure configuration requirements (exact ARNs/rule names) to prevent misconfigurations, but does not address a specific vulnerability.
Diff
diff --git a/config/latest/developerguide/cpack-prerequisites.md b/config/latest/developerguide/cpack-prerequisites.md index 636992fd6..bc2304df4 100644 --- a//config/latest/developerguide/cpack-prerequisites.md +++ b//config/latest/developerguide/cpack-prerequisites.md @@ -22 +22 @@ Before you deploy your conformance pack, turn on AWS Config recording. - 1. Sign in to the AWS Management Console and open the AWS Config console at [https://console.aws.amazon.com/config/](https://console.aws.amazon.com/config/). + 1. Sign in to the AWS Management Console and open the AWS Config console at [https://console.aws.amazon.com/config/home](https://console.aws.amazon.com/config/home). @@ -43 +43 @@ When deploying a conformance pack with remediation to an organization, the manag -AWS Config does not support AWS CloudFormation intrinsic functions for the automation execution role. You must provide the exact ARN of the role as a string. +AWS Config does not support AWS CloudFormation intrinsic functions for the automation execution role or the `ConfigRuleName`. You must provide the exact ARN of the role as a string, and you must use the complete rule name without intrinsic functions.