AWS AWSCloudFormation medium security documentation change
Summary
Added documentation for AWS::IoT::EncryptionConfiguration, updated AWS::Logs resources, and added ParseToOCSF transformer
Security assessment
The addition of AWS::IoT::EncryptionConfiguration explicitly documents encryption configuration management, a security feature. The AWS::Logs::LogGroup update introduces ResourcePolicyDocument, which relates to access control policies. These changes directly address security controls.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md index 6886543a2..378b22bb0 100644 --- a//AWSCloudFormation/latest/TemplateReference/doc-history.md +++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md @@ -10,0 +11,5 @@ Change| Description| Date +[New resource](./aws-template-resource-type-ref.html#AWS_IoT)| The following resource was added: AWS::IoT::EncryptionConfiguration. + +[AWS::IoT::EncryptionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html) + Use the AWS::IoT::EncryptionConfiguration resource to retrieve the encryption configuration for resources and data in AWS IoT Core. +| August 21, 2025 @@ -25,2 +30,6 @@ Change| Description| Date -[ AWS::Logs::xxx](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/xxx.html) - The AWS::Logs::xxx resource was updated to xxx. For more information, see [ xxx](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/xxx.html). +[ AWS::Logs::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Integration.html) + The AWS::Logs::Integration resource was updated to support creation of an integration between CloudWatch Logs and another service in this account. Currently, only integrations with OpenSearch Service are supported, and currently you can have only one integration in your account. For more information, see [Analyze with Amazon OpenSearch Service](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-OpenSearch-Dashboards.html). +[ AWS::Logs::ParseToOCF](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/ParseToOCSF.html) + The AWS::Logs::ParseToOCSF transformer was added to convert logs into [Open Cybersecurity Schema Framework (OCSF)](https://ocsf.io) events. For more information, see [Processors that you can use](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html). +[ AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/LogGroup.html) + The AWS::Logs::LogGroup resource was updated to include the ResourcePolicyDocument property. For more information, see [Working with log groups and log streams](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Working-with-log-groups-and-streams.html.html).