AWS AWSCloudFormation documentation change
Summary
Added documentation for updated EVS Environment HCX properties, Bedrock Guardrail integration, and new SMS/VOICE resources including security-related features
Security assessment
Added security controls including HCX network ACL configuration, automated reasoning policies for Guardrails, and SMS/VOICE security features (OptOutList, ProtectConfiguration, ResourcePolicy). While these are security enhancements, there's no evidence they address existing vulnerabilities.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md index 30e4f35ba..484f45bea 100644 --- a//AWSCloudFormation/latest/TemplateReference/doc-history.md +++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md @@ -10,0 +11,27 @@ Change| Description| Date +[Updated resource](./aws-template-resource-type-ref.html#AWS_EVS)| The following resource was updated: `AWS::EVS::Environment`. + +[AWS::EVS::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-evs-environment.html) + Use the `isHCXPublic` property to specify a public or private HCX VLAN. Use the `HcxNetworkAclId` property to specify a network ACL for an HCX VLAN. +| September 17, 2025 +[Updated resource](./aws-template-resource-type-ref.html#AWS_Bedrock)| The following resource was updated: `AWS::Bedrock::GuardrailAutomatedReasoningPolicyConfig`. + +[AWS::Bedrock::GuardrailAutomatedReasoningPolicyConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-guardrail-automatedreasoningpolicyconfig.html#cfn-bedrock-guardrail-automatedreasoningpolicyconfig-confidencethreshold) + Use the AWS::Bedrock::Guardrail AutomatedReasoningPolicyConfig resource to integrate Automated Reasoning policies with Guardrails. +| September 15, 2025 +[New resources](./aws-template-resource-type-ref.html#AWS_SMSVOICE)| The following resources were added: `AWS::SMSVOICE::ConfigurationSet`, `AWS::SMSVOICE::OptOutList`, `AWS::SMSVOICE::PhoneNumber`, `AWS::SMSVOICE::Pool`, `ProtectConfiguration`, `AWS::SMSVOICE::ResourcePolicy` and `AWS::SMSVOICE::SenderId`. + +[AWS::SMSVOICE::ConfigurationSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-configurationset.html) + Use the `AWS::SMSVOICE::ConfigurationSet` resource to specify a set of rules that are applied when you send a message. +[AWS::SMSVOICE::OptOutList](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-optoutlist.html) + Use the `AWS::SMSVOICE::OptOutList` resource to specify a list of destination phone numbers that should not have messages sent to them. +[AWS::SMSVOICE::PhoneNumber](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-phonenumber.html) + Use the `AWS::SMSVOICE::PhoneNumber` resource to create specify a phone number that your recipients see on their devices when you send them an SMS or MMS message. +[AWS::SMSVOICE::Pool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-pool.html) + Use the `AWS::SMSVOICE::Pool` resource to create a new pool, which is a collection of phone numbers or sender IDs that share the same settings that you can use to send messages. +[AWS::SMSVOICE::ProtectConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-protectconfiguration.html) + Use the `AWS::SMSVOICE::ProtectConfiguration` resource to create a set of capabilities to manage SMS deliveries to all countries where your customers are located. +[AWS::SMSVOICE::ResourcePolicy](AWSCloudFormation/latest/UserGuide/aws-resource-resourcepolicy.html) + Use the `AWS::SMSVOICE::ResourcePolicy` resource to specify the permissions for another AWS account on a shared resource. +[AWS::SMSVOICE::SenderId](AWSCloudFormation/latest/UserGuide/aws-resource-senderid.html) + Use the `AWS::SMSVOICE::SenderId` resource to request a new sender ID that doesn't require registration. +| September 15, 2025 @@ -224 +251 @@ Change| Description| Date - Use the `AWS::EVS::Environment` resource to create an Amazon EVS environment. + Use the `AWS::EVS::Environment` resource to specify an Amazon EVS environment.