AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-07-18 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-resource-certificatemanager-certificate.md

Summary

Added documentation about certificate export preferences (ENABLED/DISABLED) and default export behavior.

Security assessment

The change documents a security control feature (preventing certificate exports) but does not indicate a specific security vulnerability being addressed. This is a security-related configuration option rather than a response to a security incident.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-certificatemanager-certificate.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-certificatemanager-certificate.md
index 1c3b882a8..9bb6f785d 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-certificatemanager-certificate.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-certificatemanager-certificate.md
@@ -83 +83,3 @@ _Minimum_ : `20`
-Property description not available.
+You can opt out of allowing export of your certificate by specifying the `DISABLED` option. Allow export of your certificate by specifying the `ENABLED` option.
+
+If you do not specify an export preference in a new CloudFormation template, it is the same as explicitly denying export of your certificate. 
@@ -88,0 +91,2 @@ _Required_ : No
+ _Allowed values_ : `ENABLED | DISABLED`
+