AWS AWSCloudFormation medium security documentation change
Summary
Added deprecation notice for V1 metadata configuration and recommended migration to V2
Security assessment
The deprecation notice explicitly recommends recreating configurations to enable security features like journal table record expiration and live inventory tables. This suggests potential security improvements in the V2 implementation that address data management risks.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-metadatatableconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-metadatatableconfiguration.md index c543f0e5c..c1f83b575 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-metadatatableconfiguration.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-metadatatableconfiguration.md @@ -9 +9,7 @@ This is the new _AWS CloudFormation Template Reference Guide_. Please update you -The metadata table configuration of an Amazon S3 general purpose bucket. For more information, see [Accelerating data discovery with S3 Metadata](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-overview.html) and [Setting up permissions for configuring metadata tables](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-permissions.html). +###### Important + +We recommend that you create your S3 Metadata configurations by using the V2 [ MetadataConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-metadataconfiguration.html) resource type. We no longer recommend using the V1 `MetadataTableConfiguration` resource type. + +If you created your S3 Metadata configuration before July 15, 2025, we recommend that you delete and re-create your configuration by using the [ MetadataConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-metadataconfiguration.html) resource type so that you can expire journal table records and create a live inventory table. + +Creates a V1 S3 Metadata configuration for a general purpose bucket. For more information, see [Accelerating data discovery with S3 Metadata](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-overview.html) in the _Amazon S3 User Guide_. @@ -110 +116 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -LoggingConfiguration +MetadataDestination @@ -112 +118 @@ LoggingConfiguration -Metrics +MetadataTableEncryptionConfiguration