AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-07-25 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-regexconfig.md

Summary

Added documentation for input/output content detection actions (BLOCK/NONE) and guardrail evaluation enablement

Security assessment

Documents security controls for handling harmful content through blocking actions and evaluation toggles, but no evidence of addressing a specific vulnerability

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-regexconfig.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-regexconfig.md
index 4f6a70e2c..459e56406 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-regexconfig.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-regexconfig.md
@@ -76 +76,8 @@ _Required_ : No
-Property description not available.
+Specifies the action to take when harmful content is detected in the input. Supported values include:
+
+  * `BLOCK` – Block the content and replace it with blocked messaging.
+
+  * `NONE` – Take no action but return detection information in the trace response.
+
+
+
@@ -89 +96 @@ _Required_ : No
-Property description not available.
+Specifies whether to enable guardrail evaluation on the input. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response.
@@ -115 +122,8 @@ _Required_ : Yes
-Property description not available.
+Specifies the action to take when harmful content is detected in the output. Supported values include:
+
+  * `BLOCK` – Block the content and replace it with blocked messaging.
+
+  * `NONE` – Take no action but return detection information in the trace response.
+
+
+
@@ -128 +142 @@ _Required_ : No
-Property description not available.
+Specifies whether to enable guardrail evaluation on the output. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response.