AWS AWSCloudFormation documentation change
Summary
Added documentation for new Route53Resolver DelegationRecord property and INBOUND_DELEGATION direction, updated AccessAnalyzer::Analyzer with internal access configuration details, and corrected multiple documentation URLs from UserGuide to TemplateReference
Security assessment
The AccessAnalyzer update adds documentation for internal access analysis configuration, which enhances security visibility by allowing specification of analysis rules for AWS resources. However, there is no evidence this addresses a specific security vulnerability. Other changes are routine documentation updates.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md index 2327be53b..8f2365e60 100644 --- a//AWSCloudFormation/latest/TemplateReference/doc-history.md +++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md @@ -10,0 +11,10 @@ Change| Description| Date +[New resources](./aws-template-resource-type-ref.html#AWS_Route53Resolver)| The following property was added: `AWS::Route53Resolver::ResolverRule DelegationRecord`. + +[AWS::Route53Resolver::ResolverRule DelegationRecord](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html#cfn-route53resolver-resolverrule-delegationrecord) + Added a `DelegationRecord` to `ResolverRule` to support an outbound delegation rule. +| June 24, 2025 +[New resources](./aws-template-resource-type-ref.html#AWS_Route53Resolver)| The following property was updated: `AWS::Route53Resolver::ResolverEndpoint Direction`. + +[AWS::Route53Resolver::ResolverEndpoint Direction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-direction) + Added a `INBOUND_DELEGATION` to `ResolverEndpoint Direction` to support inbound delegation. +| June 24, 2025 @@ -17 +27,6 @@ Change| Description| Date -| December 31, 2029 +| June 17, 2025 +[Updated resource](./aws-template-resource-type-ref.html#AWS_AccessAnalyzer)| The following resource was updated: AWS::AccessAnalyzer::Analyzer + +[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-accessanalyzer-analyzer.html) + In the property type `AnalyzerConfiguration`, use the property `InternalAccessConfiguration` to specify the configuration of an internal access analyzer for an AWS organization or account. In the property type `InternalAccessAnalysisRule`, use the property `Inclusions` to specify list of rules for the internal access analyzer containing criteria to include in analysis. In the property type `InternalAccessAnalysisRuleCriteria`, use the property `AccountIds` to specify a list of AWS account IDs to apply to the internal access analysis rule criteria. In the property type `InternalAccessAnalysisRuleCriteria`, use the property `ResourceArns` to specify a list of resource ARNs to apply to the internal access analysis rule criteria. In the property type `InternalAccessAnalysisRuleCriteria`, use the property `ResourceTypes` to specify a list of resource types to apply to the internal access analysis rule criteria. In the property type `InternalAccessConfiguration`, use the property `InternalAccessAnalysisRule` to specify analysis rules for the internal access analyzer. +| June 16, 2025 @@ -587 +602 @@ AWS::NotificationsContacts::EmailContact -[AWS::CloudFormation::GuardHook](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html) +[AWS::CloudFormation::GuardHook](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-guardhook.html) @@ -589 +604 @@ AWS::NotificationsContacts::EmailContact -[AWS::CloudFormation::LambdaHook](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html) +[AWS::CloudFormation::LambdaHook](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-lambdahook.html) @@ -651 +666 @@ AWS::NotificationsContacts::EmailContact -[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html) +[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-accessanalyzer-analyzer.html) @@ -974 +989 @@ The following resources were added: AWS::AppSync::ChannelNamespace -[AWS::CloudFormation::CustomResource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-customresource.html) +[AWS::CloudFormation::CustomResource](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-customresource.html) @@ -1625 +1640 @@ The following resources were added: AWS::AppSync::ChannelNamespace -[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html) +[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-accessanalyzer-analyzer.html) @@ -1977 +1992 @@ The following resources were added: AWS::AppSync::ChannelNamespace -[AWS::CloudFormation::Stack](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stack.html) +[AWS::CloudFormation::Stack](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stack.html) @@ -4164 +4179 @@ You can also use the `AWS::KMS::ReplicaKey` resource to create a replica of a mu -[AWS::CloudFormation::HookDefaultVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html) +[AWS::CloudFormation::HookDefaultVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-hookdefaultversion.html) @@ -4166 +4181 @@ You can also use the `AWS::KMS::ReplicaKey` resource to create a replica of a mu -[AWS::CloudFormation::HookTypeConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html) +[AWS::CloudFormation::HookTypeConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-hooktypeconfig.html) @@ -4168 +4183 @@ You can also use the `AWS::KMS::ReplicaKey` resource to create a replica of a mu -[AWS::CloudFormation::HookVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html) +[AWS::CloudFormation::HookVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-hookversion.html) @@ -5026 +5041 @@ TagMap -[AWS::CloudFormation::PublicTypeVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-publictypeversion.html) +[AWS::CloudFormation::PublicTypeVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-publictypeversion.html) @@ -5028 +5043 @@ TagMap -[AWS::CloudFormation::Publisher](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-publisher.html) +[AWS::CloudFormation::Publisher](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-publisher.html) @@ -5030 +5045 @@ TagMap -[AWS::CloudFormation::TypeActivation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-typeactivation.html) +[AWS::CloudFormation::TypeActivation](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-typeactivation.html) @@ -5187 +5202 @@ TagMap -[AWS::CloudFormation::StackSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html) +[AWS::CloudFormation::StackSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.html) @@ -5348 +5363 @@ TagMap -[AWS::CloudFormation::StackSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html) +[AWS::CloudFormation::StackSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.html) @@ -5774 +5789 @@ TagMap -[AWS::CloudFormation::ResourceDefaultVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-resourcedefaultversion.html) +[AWS::CloudFormation::ResourceDefaultVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-resourcedefaultversion.html) @@ -5776 +5791 @@ TagMap -[AWS::CloudFormation::ResourceVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-resourceversion.html) +[AWS::CloudFormation::ResourceVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-resourceversion.html) @@ -6054 +6069 @@ TagMap -[AWS::CloudFormation::ModuleDefaultVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-moduledefaultversion.html) +[AWS::CloudFormation::ModuleDefaultVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-moduledefaultversion.html) @@ -6056 +6071 @@ TagMap -[AWS::CloudFormation::ModuleVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-moduleversion.html) +[AWS::CloudFormation::ModuleVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-moduleversion.html) @@ -6502 +6517 @@ Tmpfs -[AWS::CloudFormation::StackSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html) +[AWS::CloudFormation::StackSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.html) @@ -7356 +7371 @@ Updated resource| The following resource was updated: `AWS::EC2::Instance`. -[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html) +[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-accessanalyzer-analyzer.html)