AWS AWSCloudFormation documentation change
Summary
Added documentation for AWS::APS::ResourcePolicy resource and updated AWS::NetworkFirewall::Firewall with TransitGatewayId support. Fixed typo in VpcEndpointAssociation description and updated multiple resource links from UserGuide to TemplateReference paths.
Security assessment
The addition of AWS::APS::ResourcePolicy introduces documentation for a security feature (resource policies for access control). However, there is no evidence of addressing a specific security vulnerability. Other changes are routine updates or corrections.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md index e95ee5fcc..36ab3bbc0 100644 --- a//AWSCloudFormation/latest/TemplateReference/doc-history.md +++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md @@ -10,0 +11,5 @@ Change| Description| Date +[Added resource ](./aws-template-resource-type-ref.html#AWS_APS)| The following resource was added: AWS::APS::ResourcePolicy. + +[AWS::APS::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-resourcepolicy.html) + The AWS::APS::ResourcePolicy resource was added, and includes the `PolicyDocument`, and `WorkspaceArn` properties. For more information, see [PutResourcePolicy](https://docs.aws.amazon.com/prometheus/latest/APIReference/API_PutResourcePolicy.html) in the _Amazon Managed Service for Prometheus API Reference_. +| August 15, 2025 @@ -15,0 +21,5 @@ Change| Description| Date +[Updated resources](./aws-template-resource-type-ref.html#AWS_NetworkFirewall)| The following resource was updated: AWS::NetworkFirewall::Firewall + +[AWS::NetworkFirewall::Firewall](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewall.html) + Use the `TransitGatewayId` to associate a transit gateway with this firewall. +| August 4, 2025 @@ -18,2 +28,2 @@ Change| Description| Date -[AWS::NetworkFirewall::VpcEndpointAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-VpcEndpointAssociation.html) - Use the `AWS::NetworkFirewall::VpcEndpointAssociation` resource to specify a VPC endpoint association to expand the protections of a firewall endpoint. ou can define VPC endpoint associations only in the Availability Zones that already have a subnet mapping defined in the Firewall resource. +[AWS::NetworkFirewall::VpcEndpointAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-VpcEndpointAssociation.html) + Use the `AWS::NetworkFirewall::VpcEndpointAssociation` resource to specify a VPC endpoint association to expand the protections of a firewall endpoint. You can define VPC endpoint associations only in the Availability Zones that already have a subnet mapping defined in the Firewall resource. @@ -809 +819 @@ The following resources were added: AWS::AppSync::ChannelNamespace -[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html) +[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html) @@ -1582 +1592 @@ The following resources were added: AWS::AppSync::ChannelNamespace -[AWS::NetworkFirewall::TLSInspectionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-tlsinspectionconfiguration.html) +[AWS::NetworkFirewall::TLSInspectionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html) @@ -2575 +2585 @@ The following resources were added: AWS::AppSync::SourceApiAssociation -[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html) +[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html) @@ -2972 +2982 @@ The following resources were added: AWS::AppSync::SourceApiAssociation -[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html) +[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html) @@ -2974 +2984 @@ The following resources were added: AWS::AppSync::SourceApiAssociation -[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html) +[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-rulegroup.html) @@ -3120 +3130 @@ The following resources were added: AWS::AppSync::SourceApiAssociation -[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html) +[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html) @@ -3122 +3132 @@ The following resources were added: AWS::AppSync::SourceApiAssociation -[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html) +[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-rulegroup.html) @@ -4671 +4681 @@ You can also use the `AWS::KMS::ReplicaKey` resource to create a replica of a mu -[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html) +[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html) @@ -4673 +4683 @@ You can also use the `AWS::KMS::ReplicaKey` resource to create a replica of a mu -[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html) +[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-rulegroup.html) @@ -6330 +6340 @@ TagMap -[AWS::NetworkFirewall::Firewall](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html) +[AWS::NetworkFirewall::Firewall](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewall.html) @@ -6332 +6342 @@ TagMap -[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html) +[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html) @@ -6334 +6344 @@ TagMap -[AWS::NetworkFirewall::LoggingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-loggingconfiguration.html) +[AWS::NetworkFirewall::LoggingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-loggingconfiguration.html) @@ -6336 +6346 @@ TagMap -[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html) +[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-rulegroup.html)