AWS AWSCloudFormation documentation change
Summary
Expanded documentation for Kafka schema registry configuration
Security assessment
Adds security-relevant documentation about authentication arrays, schema validation, and secure URI formats for registry access. Improves security posture but doesn't address a specific known issue.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-eventsourcemapping-schemaregistryconfig.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-eventsourcemapping-schemaregistryconfig.md index eba4e8852..c97e06b26 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-eventsourcemapping-schemaregistryconfig.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-eventsourcemapping-schemaregistryconfig.md @@ -9 +9 @@ This is the new _AWS CloudFormation Template Reference Guide_. Please update you -The `SchemaRegistryConfig` property type specifies Property description not available. for an [AWS::Lambda::EventSourceMapping](./aws-resource-lambda-eventsourcemapping.html). +Specific configuration settings for a Kafka schema registry. @@ -42 +42 @@ To declare this entity in your AWS CloudFormation template, use the following sy -Property description not available. +An array of access configuration objects that tell Lambda how to authenticate with your schema registry. @@ -55 +55,8 @@ _Required_ : No -Property description not available. +The record format that Lambda delivers to your function after schema validation. + + * Choose `JSON` to have Lambda deliver the record to your function as a standard JSON object. + + * Choose `SOURCE` to have Lambda deliver the record to your function in its original source format. Lambda removes all schema metadata, such as the schema ID, before sending the record to your function. + + + @@ -68 +75,8 @@ _Required_ : No -Property description not available. +The URI for your schema registry. The correct URI format depends on the type of schema registry you're using. + + * For AWS Glue schema registries, use the ARN of the registry. + + * For Confluent schema registries, use the URL of the registry. + + + @@ -85 +99 @@ _Minimum_ : `1` -Property description not available. +An array of schema validation configuration objects, which tell Lambda the message attributes you want to validate and filter using your schema registry.