AWS AWSCloudFormation documentation change
Summary
Updated parameter name length documentation and removed note about SecureString unsupported by CloudFormation
Security assessment
Removal of the SecureString note could indicate documentation correction, but no explicit security context is provided. Parameter length clarifications are operational, not security-focused.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-parameter.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-parameter.md index 1f38fdb92..55b2e0717 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-parameter.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-parameter.md @@ -11 +11 @@ The `AWS::SSM::Parameter` resource creates an SSM parameter in AWS Systems Manag -###### Important +###### Note @@ -15 +15 @@ To create an SSM parameter, you must have the AWS Identity and Access Management -To add, update, or remove tags during stack update, you must have IAM permissions for both `ssm:AddTagsToResource` and `ssm:RemoveTagsFromResource`. For more information, see [Managing Access Using Policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam.html#security_iam_access-manage) in the _AWS Systems Manager User Guide_. +To add, update, or remove tags during stack update, you must have IAM permissions for both `ssm:AddTagsToResource` and `ssm:RemoveTagsFromResource`. For more information, see [Managing access using policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam.html#security_iam_access-manage) in the _AWS Systems Manager User Guide_. @@ -19,4 +18,0 @@ For information about valid values for parameters, see [About requirements and c -###### Note - -Parameters of type `SecureString` are not supported by AWS CloudFormation. - @@ -115 +111,3 @@ The name of the parameter. -The maximum length constraint listed below includes capacity for additional system attributes that aren't part of the name. The maximum length for a parameter name, including the full length of the parameter Amazon Resource Name (ARN), is 1011 characters. For example, the length of the following parameter name is 65 characters, not 20 characters: `arn:aws:ssm:us-east-2:111222333444:parameter/ExampleParameterName` +The reported maximum length of 2048 characters for a parameter name includes 1037 characters that are reserved for internal use by Systems Manager. The maximum length for a parameter name that you specify is 1011 characters. + +This count of 1011 characters includes the characters in the ARN that precede the name you specify. This ARN length will vary depending on your partition and Region. For example, the following 45 characters count toward the 1011 character maximum for a parameter created in the US East (Ohio) Region: `arn:aws:ssm:us-east-2:111122223333:parameter/`.