AWS Security ChangesHomeSearch

AWS AWSCloudFormation high security documentation change

Service: AWSCloudFormation · 2025-08-22 · Security-related high

File: AWSCloudFormation/latest/UserGuide/quickref-dynamodb.md

Summary

Corrected IAM role ARN in DynamoDB Auto Scaling example

Security assessment

Fixes incorrect service-specific IAM role reference that could lead to privilege escalation if misconfigured

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/quickref-dynamodb.md b/AWSCloudFormation/latest/UserGuide/quickref-dynamodb.md
index 1a462e53e..6269ddb3d 100644
--- a//AWSCloudFormation/latest/UserGuide/quickref-dynamodb.md
+++ b//AWSCloudFormation/latest/UserGuide/quickref-dynamodb.md
@@ -94 +94 @@ This example sets up Application Auto Scaling for a `AWS::DynamoDB::Table` resou
-                    "RoleARN" : { "Fn::Sub" : "arn:aws:iam::${AWS::AccountId}:role/aws-service-role/rds.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_RDSCluster" },
+                    "RoleARN" : { "Fn::Sub" : "arn:aws:iam::${AWS::AccountId}:role/aws-service-role/dynamodb.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_DynamoDBTable" },