AWS managedservices high security documentation change
Summary
Removed insecure SSL policy options, updated path regex, added PreconfiguredParameters field for SSM automation
Security assessment
Removal of ELBSecurityPolicy-TLS-1-0-2015-04 (TLS 1.0) directly mitigates a security risk. New parameters may support secure configurations but lack explicit security context.
Diff
diff --git a/managedservices/latest/ctref/schemas.md b/managedservices/latest/ctref/schemas.md index 11f4275cd..205cb9028 100644 --- a//managedservices/latest/ctref/schemas.md +++ b//managedservices/latest/ctref/schemas.md @@ -2589 +2588,0 @@ Change type schemas specify the execution input parameters for a change type. - "ELBSecurityPolicy-TLS-1-0-2015-04", @@ -10278 +10276,0 @@ Change type schemas specify the execution input parameters for a change type. - "ELBSecurityPolicy-TLS-1-0-2015-04", @@ -10335 +10332,0 @@ Change type schemas specify the execution input parameters for a change type. - "ELBSecurityPolicy-TLS-1-0-2015-04", @@ -10369 +10366 @@ Change type schemas specify the execution input parameters for a change type. - "pattern": "^(/?[a-z0-9\\-._~%!$&'()*+,;=@]+(/[a-z0-9\\-._~%!$&'()*+,;=:@]+)*/?|/){1,1024}$" + "pattern": "^(/?[a-zA-Z0-9\\-._~%!$&'()*+,;=@]+(/[a-zA-Z0-9\\-._~%!$&'()*+,;=:@]+)*/?|/){1,1024}$" @@ -12497 +12493,0 @@ Change type schemas specify the execution input parameters for a change type. - "ELBSecurityPolicy-TLS-1-0-2015-04", @@ -12523 +12518,0 @@ Change type schemas specify the execution input parameters for a change type. - "ELBSecurityPolicy-TLS-1-0-2015-04", @@ -14696 +14690,0 @@ Change type schemas specify the execution input parameters for a change type. - "ELBSecurityPolicy-TLS-1-0-2015-04", @@ -14735 +14728,0 @@ Change type schemas specify the execution input parameters for a change type. - "ELBSecurityPolicy-TLS-1-0-2015-04", @@ -42874,0 +42868,5 @@ Change type schemas specify the execution input parameters for a change type. + "PreconfiguredParameters": { + "type": "string", + "description": "Parameters (key/value pairs) passed to the SSM automation document during remediation execution, in the form: '{\"key1\":\"value1\",\"key2\":\"value\"}'. Use '{}' to remove currently applied values from the configuration.", + "pattern": "^\\{\\s*(\"[A-Z][A-Za-z0-9]{3,63}\"\\s*:\\s*\"[\\s-\\!\\#-\\~(\\\")]{0,255}\")(\\s*,\\s*\"[A-Z][A-Za-z0-9]{3,63}\"\\s*:\\s*\"[\\s-\\!\\#-\\~(\\\")]{0,255}\"){0,7}\\s*\\}$|^\\{\\}$" + }, @@ -42876 +42874 @@ Change type schemas specify the execution input parameters for a change type. - "description": "True to check member accounts for existing findings and update the remediation configuration with the specified new values, only if no findings are present. False to update the remediation configuration without checking for existing findings in any account. Default is True.", + "description": "To check member accounts for existing findings and update the remediation configuration with the specified new values, if no findings are present, choose 'true'. To update the remediation configuration without checking for existing findings in any account, choose 'false'.", @@ -42887,0 +42886 @@ Change type schemas specify the execution input parameters for a change type. + "PreconfiguredParameters",