AWS cli medium security documentation change
Summary
Added clarification that S3 static website URLs are not supported for template body
Security assessment
Explicitly blocking S3 static website URLs (which use HTTP) enforces HTTPS requirements for template retrieval, preventing potential insecure transmission of CloudFormation templates. This addresses a security best practice for secure data transfer.
Diff
diff --git a/cli/latest/reference/cloudformation/update-stack-set.md b/cli/latest/reference/cloudformation/update-stack-set.md index 07200d077..5553536dc 100644 --- a//cli/latest/reference/cloudformation/update-stack-set.md +++ b//cli/latest/reference/cloudformation/update-stack-set.md @@ -15 +15 @@ - * [AWS CLI 2.27.45 Command Reference](../../index.html) » + * [AWS CLI 2.27.46 Command Reference](../../index.html) » @@ -63,0 +64,11 @@ Even if the stack set operation created by updating the stack set fails (complet +### Note + +The maximum number of organizational unit (OUs) supported by a `UpdateStackSet` operation is 50. + +If you need more than 50, consider the following options: + + * _Batch processing:_ If you don’t want to expose your OU hierarchy, split up the operations into multiple calls with less than 50 OUs each. + * _Parent OU strategy:_ If you don’t mind exposing the OU hierarchy, target a parent OU that contains all desired child OUs. + + + @@ -129 +140 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf -> The URL of a file that contains the template body. The URL must point to a template (maximum size: 1 MB) that is located in an Amazon S3 bucket or a Systems Manager document. The location for an Amazon S3 bucket must start with `https://` . +> The URL of a file that contains the template body. The URL must point to a template (maximum size: 1 MB) that is located in an Amazon S3 bucket or a Systems Manager document. The location for an Amazon S3 bucket must start with `https://` . S3 static website URLs are not supported. @@ -196,7 +207,7 @@ JSON Syntax: ->> * [AWS::IAM::AccessKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-accesskey.html) ->> * [AWS::IAM::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-group.html) ->> * [AWS::IAM::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html) ->> * [AWS::IAM::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html) ->> * [AWS::IAM::Role](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html) ->> * [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-user.html) ->> * [AWS::IAM::UserToGroupAddition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-usertogroupaddition.html) +>> * [AWS::IAM::AccessKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html) +>> * [AWS::IAM::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html) +>> * [AWS::IAM::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html) +>> * [AWS::IAM::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html) +>> * [AWS::IAM::Role](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html) +>> * [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html) +>> * [AWS::IAM::UserToGroupAddition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html) @@ -253 +264 @@ Syntax: ->>> _Required_ . A string containing the value for this tag. You can specify a maximum of 256 characters for a tag value. +>>> _Required_ . A string that contains the value for this tag. You can specify a maximum of 256 characters for a tag value. @@ -291 +302 @@ JSON Syntax: ->> Conditional: You must specify either `FailureToleranceCount` or `FailureTolerancePercentage` (but not both). +>> You can specify either `FailureToleranceCount` or `FailureTolerancePercentage` , but not both. @@ -301 +312 @@ JSON Syntax: ->> Conditional: You must specify either `FailureToleranceCount` or `FailureTolerancePercentage` , but not both. +>> You can specify either `FailureToleranceCount` or `FailureTolerancePercentage` , but not both. @@ -311 +322 @@ JSON Syntax: ->> Conditional: You must specify either `MaxConcurrentCount` or `MaxConcurrentPercentage` , but not both. +>> You can specify either `MaxConcurrentCount` or `MaxConcurrentPercentage` , but not both. @@ -323 +334 @@ JSON Syntax: ->> Conditional: You must specify either `MaxConcurrentCount` or `MaxConcurrentPercentage` , but not both. +>> You can specify either `MaxConcurrentCount` or `MaxConcurrentPercentage` , but not both. @@ -701 +712 @@ OperationId -> (string) - * [AWS CLI 2.27.45 Command Reference](../../index.html) » + * [AWS CLI 2.27.46 Command Reference](../../index.html) »