AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-07-01 · Documentation low

File: cli/latest/reference/cloudformation/describe-stack-resource-drifts.md

Summary

Updated CLI version reference, added 'UNKNOWN' drift status documentation, improved property descriptions, and added DriftStatusReason field

Security assessment

The changes primarily document a new 'UNKNOWN' drift detection status and improve grammatical consistency. While drift detection helps identify configuration changes, there's no evidence this addresses a specific security vulnerability or introduces new security controls.

Diff

diff --git a/cli/latest/reference/cloudformation/describe-stack-resource-drifts.md b/cli/latest/reference/cloudformation/describe-stack-resource-drifts.md
index 9b706c6f8..ea8791bca 100644
--- a//cli/latest/reference/cloudformation/describe-stack-resource-drifts.md
+++ b//cli/latest/reference/cloudformation/describe-stack-resource-drifts.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.46 Command Reference](../../index.html) »
@@ -111,0 +112 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf
+>   * `UNKNOWN` : CloudFormation could not run drift detection for the resource.
@@ -126,0 +128 @@ Syntax:
+      UNKNOWN
@@ -334 +336 @@ StackResourceDrifts -> (list)
->>> A JSON structure containing the expected property values of the stack resource, as defined in the stack template and any values specified as template parameters.
+>>> A JSON structure that contains the expected property values of the stack resource, as defined in the stack template and any values specified as template parameters.
@@ -340 +342 @@ StackResourceDrifts -> (list)
->>> A JSON structure containing the actual property values of the stack resource.
+>>> A JSON structure that contains the actual property values of the stack resource.
@@ -381,0 +384 @@ StackResourceDrifts -> (list)
+>>>   * `UNKNOWN` : CloudFormation could not run drift detection for the resource. See the `DriftStatusReason` for details.
@@ -395 +398 @@ StackResourceDrifts -> (list)
->>>> A concatenated list of the module type or types containing the resource. Module types are listed starting with the inner-most nested module, and separated by `/` .
+>>>> A concatenated list of the module type or types that contains the resource. Module types are listed starting with the inner-most nested module, and separated by `/` .
@@ -403 +406 @@ StackResourceDrifts -> (list)
->>>> A concatenated list of the logical IDs of the module or modules containing the resource. Modules are listed starting with the inner-most nested module, and separated by `/` .
+>>>> A concatenated list of the logical IDs of the module or modules that contains the resource. Modules are listed starting with the inner-most nested module, and separated by `/` .
@@ -409,0 +413,4 @@ StackResourceDrifts -> (list)
+>> 
+>> DriftStatusReason -> (string)
+>>
+>>> The reason for the drift status.
@@ -425 +432 @@ NextToken -> (string)
-  * [AWS CLI 2.27.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.46 Command Reference](../../index.html) »