AWS cli medium security documentation change

Service: cli · 2025-07-01 · Security-related medium

File: cli/latest/reference/cloudformation/create-stack-set.md

Summary

Updated CLI version reference from 2.27.45 to 2.27.46; Added clarification that S3 static website URLs are not supported for template URLs; Updated documentation links for IAM resources; Minor wording improvements

Security assessment

Similar to the create-change-set.md changes, explicitly prohibiting S3 static website URLs for templates prevents insecure retrieval mechanisms. This reinforces HTTPS requirements for template sources, mitigating potential man-in-the-middle risks during template fetching.

Diff

diff --git a/cli/latest/reference/cloudformation/create-stack-set.md b/cli/latest/reference/cloudformation/create-stack-set.md
index 9d18a4a06..4ba0b4461 100644
--- a//cli/latest/reference/cloudformation/create-stack-set.md
+++ b//cli/latest/reference/cloudformation/create-stack-set.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.46 Command Reference](../../index.html) »
@@ -123 +123 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf
-> Conditional: You must specify either the TemplateBody or the TemplateURL parameter, but not both.
+> Conditional: You must specify either the `TemplateBody` or the `TemplateURL` parameter, but not both.
@@ -127 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf
-> The URL of a file that contains the template body. The URL must point to a template (maximum size: 1 MB) that’s located in an Amazon S3 bucket or a Systems Manager document. The location for an Amazon S3 bucket must start with `https://` .
+> The URL of a file that contains the template body. The URL must point to a template (maximum size: 1 MB) that’s located in an Amazon S3 bucket or a Systems Manager document. The location for an Amazon S3 bucket must start with `https://` . S3 static website URLs are not supported.
@@ -129 +129 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf
-> Conditional: You must specify either the TemplateBody or the TemplateURL parameter, but not both.
+> Conditional: You must specify either the `TemplateBody` or the `TemplateURL` parameter, but not both.
@@ -192,7 +192,7 @@ JSON Syntax:
->>   * [AWS::IAM::AccessKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-accesskey.html)
->>   * [AWS::IAM::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-group.html)
->>   * [AWS::IAM::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html)
->>   * [AWS::IAM::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html)
->>   * [AWS::IAM::Role](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html)
->>   * [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-user.html)
->>   * [AWS::IAM::UserToGroupAddition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-usertogroupaddition.html)
+>>   * [AWS::IAM::AccessKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html)
+>>   * [AWS::IAM::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html)
+>>   * [AWS::IAM::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html)
+>>   * [AWS::IAM::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html)
+>>   * [AWS::IAM::Role](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html)
+>>   * [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html)
+>>   * [AWS::IAM::UserToGroupAddition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html)
@@ -241 +241 @@ Syntax:
->>> _Required_ . A string containing the value for this tag. You can specify a maximum of 256 characters for a tag value.
+>>> _Required_ . A string that contains the value for this tag. You can specify a maximum of 256 characters for a tag value.
@@ -522 +522 @@ StackSetId -> (string)
-  * [AWS CLI 2.27.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.46 Command Reference](../../index.html) »