AWS AWSCloudFormation high security documentation change

Service: AWSCloudFormation · 2025-10-01 · Security-related high

File: AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.md

Summary

Multiple changes including making 'Users' optional, adding allowed values, and validation patterns

Security assessment

Changing the 'Users' array to optional (previously required) could allow deployment of brokers without any configured users, leading to complete lack of authentication - a critical security risk. This is concrete evidence of a security-impacting change.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.md
index ce91fd888..c4a53265f 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.md
@@ -124,0 +125,2 @@ _Required_ : No
+ _Allowed values_ : `SIMPLE | LDAP`
+
@@ -150,0 +153,2 @@ _Required_ : Yes
+ _Pattern_ : `^[0-9A-Za-z_-]{1,50}$`
+
@@ -172,0 +177,2 @@ _Required_ : No
+ _Allowed values_ : `NONE | CRDR`
+
@@ -183,0 +190,2 @@ _Required_ : No
+ _Pattern_ : `^arn:.*`
+
@@ -203,0 +212,2 @@ _Required_ : Yes
+ _Allowed values_ : `SINGLE_INSTANCE | ACTIVE_STANDBY_MULTI_AZ | CLUSTER_MULTI_AZ`
+
@@ -225,0 +236,2 @@ _Required_ : Yes
+ _Allowed values_ : `ACTIVEMQ | RABBITMQ`
+
@@ -302,0 +315,4 @@ _Required_ : No
+ _Minimum_ : `1`
+
+ _Maximum_ : `5`
+
@@ -313,0 +330,2 @@ _Required_ : No
+ _Allowed values_ : `EBS | EFS`
+
@@ -347 +365 @@ The list of broker users (persons or applications) who can access queues and top
-_Required_ : Yes
+_Required_ : No
@@ -401,0 +420,5 @@ The revision number of the configuration.
+Property description not available.
+
+`EngineVersionCurrent`
+    
+