AWS AWSCloudFormation documentation change
Summary
Updated terminology from 'stack set' to 'StackSet' (capitalized) throughout the documentation for consistency. Added clarification about customizing individual stacks with parameters. Minor rewording for clarity in descriptions of IAM roles, capabilities, and managed execution.
Security assessment
The changes primarily involve capitalization consistency ('StackSet' vs 'stack set') and minor clarifications about existing functionality. No new security controls, vulnerabilities, or mitigations were introduced. References to IAM roles and capabilities remain unchanged in their security context.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.md index a9be23888..da7cfe110 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.md @@ -9 +9 @@ This is the new _AWS CloudFormation Template Reference Guide_. Please update you -The `AWS::CloudFormation::StackSet` resource enables you to provision stacks into AWS accounts and across Regions by using a single CloudFormation template. In the stack set, you specify the template to use, in addition to any parameters and capabilities that the template requires. +The `AWS::CloudFormation::StackSet` resource contains information about a StackSet. With StackSets, you can provision stacks across AWS accounts and Regions from a single CloudFormation template. Each stack is based on the same CloudFormation template, but you can customize individual stacks using parameters. @@ -78 +78 @@ To declare this entity in your AWS CloudFormation template, use the following sy -The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. +The Amazon Resource Number (ARN) of the IAM role to use to create this StackSet. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account. @@ -80 +80 @@ The Amazon Resource Number (ARN) of the IAM role to use to create this stack set -Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see [Grant self-managed permissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html) in the _AWS CloudFormation User Guide_. +Use customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account. For more information, see [Grant self-managed permissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html) in the _AWS CloudFormation User Guide_. @@ -112 +112 @@ Specifies whether you are acting as an account administrator in the organization -By default, `SELF` is specified. Use `SELF` for stack sets with self-managed permissions. +By default, `SELF` is specified. Use `SELF` for StackSets with self-managed permissions. @@ -114 +114 @@ By default, `SELF` is specified. Use `SELF` for stack sets with self-managed per - * To create a stack set with service-managed permissions while signed in to the management account, specify `SELF`. + * To create a StackSet with service-managed permissions while signed in to the management account, specify `SELF`. @@ -116 +116 @@ By default, `SELF` is specified. Use `SELF` for stack sets with self-managed per - * To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify `DELEGATED_ADMIN`. + * To create a StackSet with service-managed permissions while signed in to a delegated administrator account, specify `DELEGATED_ADMIN`. @@ -123 +123 @@ Your AWS account must be registered as a delegated admin in the management accou -Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. +StackSets with service-managed permissions are created in the management account, including StackSets that are created by delegated administrators. @@ -138 +138 @@ _Required_ : No -The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account—for example, by creating new IAM users. For more information, see [Acknowledging IAM resources in CloudFormation templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities) in the _AWS CloudFormation User Guide_. +The capabilities that are allowed in the StackSet. Some StackSet templates might include resources that can affect permissions in your AWS account—for example, by creating new IAM users. For more information, see [Acknowledging IAM resources in CloudFormation templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities) in the _AWS CloudFormation User Guide_. @@ -149 +149 @@ _Required_ : No -A description of the stack set. +A description of the StackSet. @@ -164 +164 @@ _Required_ : No -The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the `AWSCloudFormationStackSetExecutionRole` role for the stack set operation. +The name of the IAM execution role to use to create the StackSet. If you don't specify an execution role, CloudFormation uses the `AWSCloudFormationStackSetExecutionRole` role for the StackSet operation. @@ -191 +191 @@ If there are already running or queued operations, StackSets queues all incoming -You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. +You can't modify your StackSet's execution configuration while there are running or queued operations for that StackSet. @@ -204 +204 @@ _Required_ : No -The user-specified preferences for how CloudFormation performs a stack set operation. +The user-specified preferences for how CloudFormation performs a StackSet operation. @@ -215 +215 @@ _Required_ : No -The input parameters for the stack set template. +The input parameters for the StackSet template. @@ -226 +226 @@ _Required_ : No -Describes how the IAM roles required for stack set operations are created. +Describes how the IAM roles required for StackSet operations are created. @@ -230 +230 @@ Describes how the IAM roles required for stack set operations are created. - * With `SERVICE_MANAGED` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations. For more information, see [Activate trusted access for stack sets with AWS Organizations](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html) in the _AWS CloudFormation User Guide_. + * With `SERVICE_MANAGED` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations. For more information, see [Activate trusted access for StackSets with AWS Organizations](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html) in the _AWS CloudFormation User Guide_. @@ -257 +257 @@ _Required_ : No -The name to associate with the stack set. The name must be unique in the Region where you create your stack set. +The name to associate with the StackSet. The name must be unique in the Region where you create your StackSet. @@ -337 +337 @@ For more information about using the `Fn::GetAtt` intrinsic function, see [`Fn:: -The ID of the stack that you're creating. +Returns the unique identifier of the resource. @@ -343 +343 @@ The ID of the stack that you're creating. - * Activate managed execution for your stack set + * Activate managed execution for your StackSet @@ -350 +350 @@ The ID of the stack that you're creating. -### Activate managed execution for your stack set +### Activate managed execution for your StackSet @@ -352 +352 @@ The ID of the stack that you're creating. -The following example creates a stack set and specifies `ManagedExecution`. With managed execution activated, StackSets performs non-conflicting operations concurrently and queues conflicting operations. +The following example creates a StackSet and specifies `ManagedExecution`. With managed execution activated, StackSets performs non-conflicting operations concurrently and queues conflicting operations.