AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-07-18 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/doc-history.md

Summary

Added documentation for new IoTManagedIntegrations resources, updated RDS DBCluster with DeleteAutomatedBackups property, added BillingView resource, and made minor text corrections

Security assessment

Added security-related documentation for IoTManagedIntegrations resources (CredentialLocker, ManagedThing) which involve credential management and device provisioning. The RDS DBCluster's DeleteAutomatedBackups property documentation helps implement secure backup retention policies. However, there is no evidence these changes address specific security vulnerabilities.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md
index 809ad911f..6ab89cc66 100644
--- a//AWSCloudFormation/latest/TemplateReference/doc-history.md
+++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md
@@ -10,0 +11,20 @@ Change| Description| Date
+[Updated resource](./aws-template-resource-type-ref.html#AWS_IoTManagedIntegrations)| The following resources were updated: `AWS::IoTManagedIntegrations::CredentialLocker`, `AWS::IoTManagedIntegrations::ManagedThing`, and `AWS::IoTManagedIntegrations::ProvisioningProfile`.
+
+[AWS::IoTManagedIntegrations::CredentialLocker](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotmanagedintegrations-credentiallocker.html)
+     Use the `AWS::IoTManagedIntegrations::CredentialLocker` to create a credential locker.
+[AWS::IoTManagedIntegrations::ManagedThing](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotmanagedintegrations-managedthing.html)
+     Use the `AWS::IoTManagedIntegrations::ManagedThing` to create a managed thing.
+[AWS::IoTManagedIntegrations::ProvisioningProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotmanagedintegrations-provisioningprofile.html)
+     Use the `AWS::IoTManagedIntegrations::ProvisioningProfile` to create a provisioning profile.
+| July 17, 2025  
+[Updated resource](./aws-template-resource-type-ref.html#AWS_RDS)| The following resource was updated: AWS::RDS::DBCluster
+
+[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
+     Use the `DeleteAutomatedBackups` property to specify whether to remove automated backups immediately after the DB cluster is deleted.
+| July 16, 2025  
+[New resources](./aws-template-resource-type-ref.html#AWS_Billing)| The following resources were added: `AWS::Billing::BillingView`.Use the [AWS::Billing::BillingView](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-billing-resource.html) resource to create a billing view with specified billing view attributes.| July 16, 2025  
+[Updated resource](./aws-template-resource-type-ref.html#AWS_Wisdom)| The following resource was updated: AWS::Wisdom::QuickResponse.
+
+[AWS::Wisdom::QuickResponse](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-quickresponse.html)
+     Use the `AWS::Wisdom::QuickResponse` resource to specify an Amazon Connect Wisdom quick response.
+| July 15, 2025  
@@ -412 +432 @@ AWS::NotificationsContacts::EmailContact
-     Use the `EnableFaultInjection` property to enable fault injection and allows for fault injection requests to be accepted from the task's containers.
+     Use the `EnableFaultInjection` property to enable fault injection and allow for fault injection requests to be accepted from the task's containers.
@@ -677 +697 @@ AWS::NotificationsContacts::EmailContact
-     Use the `VpcLatticeConfiguration` property to enable VPC Lattice configuration for your service that holds the information for the target group(s) Amazon ECS tasks will be registered to.
+     Use the `VpcLatticeConfiguration` property to enable VPC Lattice configuration for your service. This configuration holds the information for the target group(s) to which Amazon ECS tasks will be registered.
@@ -3159,5 +3178,0 @@ The following resources were added: AWS::AppSync::SourceApiAssociation
-[AWS::ECS::TaskDefinition PortMappings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-portmappings.html)
-     Use the `Name` property to specify the port mapping name. Use the `AppProtocol` property to specify the port mapping's application protocol.
-| December 2, 2022  
-[Updated resources](./aws-template-resource-type-ref.html#AWS_ECS)| The following resources were updated: AWS::ECS::TaskDefinition.
-