AWS AWSCloudFormation medium security documentation change

Service: AWSCloudFormation · 2025-10-01 · Security-related medium

File: AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioprincipalassociation.md

Summary

Changed 'PortfolioId' and 'PrincipalARN' properties from optional to required in Service Catalog PortfolioPrincipalAssociation resource documentation

Security assessment

Making these fields required prevents potential misconfigurations where principals might be unintentionally associated/dissociated from Service Catalog portfolios. Improper access control configuration could lead to privilege escalation or unauthorized access, though no specific vulnerability is explicitly mentioned.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioprincipalassociation.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioprincipalassociation.md
index 1dcd94758..ba2b2ab25 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioprincipalassociation.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioprincipalassociation.md
@@ -67 +67 @@ The portfolio identifier.
-_Required_ : No
+_Required_ : Yes
@@ -84 +84 @@ The ARN of the principal (IAM user, role, or group).
-_Required_ : No
+_Required_ : Yes