AWS AWSCloudFormation documentation change
Summary
Updated CodeSigningConfigArn pattern to include 'eusc-' region prefix
Security assessment
The pattern update expands valid code signing configuration ARNs for security-related code signing features, but does not address a specific security vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-function.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-function.md index 62ba84e04..ae017125c 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-function.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-function.md @@ -158 +158 @@ _Required_ : No - _Pattern_ : `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:code-signing-config:csc-[a-z0-9]{17}` + _Pattern_ : `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:code-signing-config:csc-[a-z0-9]{17}`