AWS AWSCloudFormation medium security documentation change

Service: AWSCloudFormation · 2025-10-01 · Security-related medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-amazonmq-broker-ldapservermetadata.md

Summary

Changed 'Service account password' field requirement from Yes to No

Security assessment

Making the LDAP service account password optional could lead to misconfigurations where authentication credentials are omitted, potentially allowing unauthorized access to the broker. This directly impacts authentication security controls.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-amazonmq-broker-ldapservermetadata.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-amazonmq-broker-ldapservermetadata.md
index 1092c7994..b2cb3e846 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-amazonmq-broker-ldapservermetadata.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-amazonmq-broker-ldapservermetadata.md
@@ -116 +116 @@ Service account password. A service account is an account in your LDAP server th
-_Required_ : Yes
+_Required_ : No