AWS AWSCloudFormation documentation change
Summary
Updated IAM role ARN pattern validation and documentation links
Security assessment
The ARN pattern change improves validation but lacks explicit security context. Documentation link updates are routine with no security impact.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-domain.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-domain.md index b7ad43236..5b0035851 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-domain.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-domain.md @@ -126 +126 @@ _Required_ : No - _Pattern_ : `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` + _Pattern_ : `^arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+$` @@ -158 +158 @@ When you pass the logical ID of this resource to the intrinsic `Ref` function, ` -For more information about using the `Ref` function, see [`Ref`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ref.html). +For more information about using the `Ref` function, see [`Ref`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html). @@ -164 +164 @@ The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of -For more information about using the `Fn::GetAtt` intrinsic function, see [`Fn::GetAtt`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html). +For more information about using the `Fn::GetAtt` intrinsic function, see [`Fn::GetAtt`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html).