AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-07-01 · Documentation medium

File: cli/latest/reference/configservice/associate-resource-types.md

Summary

Added multiple new resource types to associate with configuration recorder and updated service-linked recorder name prefix

Security assessment

Addition of security-related resource types (e.g., AWS::Bedrock::Guardrail, AWS::SecurityHub::Standard, AWS::IAM::OIDCProvider) enhances security monitoring capabilities but does not address a specific vulnerability

Diff

diff --git a/cli/latest/reference/configservice/associate-resource-types.md b/cli/latest/reference/configservice/associate-resource-types.md
index 881c0fa9e..3972eaa65 100644
--- a//cli/latest/reference/configservice/associate-resource-types.md
+++ b//cli/latest/reference/configservice/associate-resource-types.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.46 Command Reference](../../index.html) »
@@ -517,0 +518,35 @@ Syntax:
+      AWS::AppConfig::ExtensionAssociation
+      AWS::AppIntegrations::Application
+      AWS::AppSync::ApiCache
+      AWS::Bedrock::Guardrail
+      AWS::Bedrock::KnowledgeBase
+      AWS::Cognito::IdentityPool
+      AWS::Connect::Rule
+      AWS::Connect::User
+      AWS::EC2::ClientVpnTargetNetworkAssociation
+      AWS::EC2::EIPAssociation
+      AWS::EC2::IPAMResourceDiscovery
+      AWS::EC2::IPAMResourceDiscoveryAssociation
+      AWS::EC2::InstanceConnectEndpoint
+      AWS::EC2::SnapshotBlockPublicAccess
+      AWS::EC2::VPCBlockPublicAccessExclusion
+      AWS::EC2::VPCBlockPublicAccessOptions
+      AWS::EC2::VPCEndpointConnectionNotification
+      AWS::EC2::VPNConnectionRoute
+      AWS::Evidently::Segment
+      AWS::IAM::OIDCProvider
+      AWS::InspectorV2::Activation
+      AWS::MSK::ClusterPolicy
+      AWS::MSK::VpcConnection
+      AWS::MediaConnect::Gateway
+      AWS::MemoryDB::SubnetGroup
+      AWS::OpenSearchServerless::Collection
+      AWS::OpenSearchServerless::VpcEndpoint
+      AWS::Redshift::EndpointAuthorization
+      AWS::Route53Profiles::Profile
+      AWS::S3::StorageLensGroup
+      AWS::S3Express::BucketPolicy
+      AWS::S3Express::DirectoryBucket
+      AWS::SageMaker::InferenceExperiment
+      AWS::SecurityHub::Standard
+      AWS::Transfer::Profile
@@ -635 +670 @@ ConfigurationRecorder -> (structure)
->> For service-linked configuration recorders, Config automatically assigns a name that has the prefix “`AWSConfigurationRecorderFor` “ to a new service-linked configuration recorder.
+>> For service-linked configuration recorders, Config automatically assigns a name that has the prefix “`AWS` “ to a new service-linked configuration recorder.
@@ -956 +991 @@ ConfigurationRecorder -> (structure)
-  * [AWS CLI 2.27.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.46 Command Reference](../../index.html) »