AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-08-28 · Documentation low

File: AWSCloudFormation/latest/UserGuide/registry-public.md

Summary

Removed JSON examples of IAM role trust policies for resource/hook extensions

Security assessment

Removal of example IAM trust policies doesn't indicate a security issue. These were documentation examples for extension configurations rather than addressing vulnerabilities.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/registry-public.md b/AWSCloudFormation/latest/UserGuide/registry-public.md
index 964b036d4..9f8f41b59 100644
--- a//AWSCloudFormation/latest/UserGuide/registry-public.md
+++ b//AWSCloudFormation/latest/UserGuide/registry-public.md
@@ -68,29 +67,0 @@ The following is an example IAM role trust policy for a resource type extension.
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Principal": {
-                    "Service": "resources."
-                },
-                "Action": "sts:AssumeRole",
-                "Condition": {
-                    "StringEquals": {
-                        "aws:SourceAccount": "123456789012"
-                    },
-                    "StringLike": {
-                        "aws:SourceArn": "arn:aws:cloudformation:us-west-2:123456789012:type/resource/Organization-Service-Resource/*"
-                    }
-                }
-            }
-        ]
-    }
-    
-
@@ -101,32 +71,0 @@ The following is an example IAM role trust policy for a Hook extension.
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Principal": {
-                    "Service": [
-                        "resources.",
-                        "hooks."
-                    ]
-                },
-                "Action": "sts:AssumeRole",
-                "Condition": {
-                    "StringEquals": {
-                        "aws:SourceAccount": "123456789012"
-                    },
-                    "StringLike": {
-                        "aws:SourceArn": "arn:aws:cloudformation:us-west-2:123456789012:type/hook/Organization-Service-Hook/*"
-                    }
-                }
-            }
-        ]
-    }
-    
-