AWS AWSCloudFormation documentation change
Summary
Updated warning about deregistering private extensions and clarified operational impacts.
Security assessment
The change emphasizes operational risks of deregistering extensions but does not address security vulnerabilities or introduce security features.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/registry-private-deregister-extension.md b/AWSCloudFormation/latest/UserGuide/registry-private-deregister-extension.md index b0d0d44de..158ec3aa9 100644 --- a//AWSCloudFormation/latest/UserGuide/registry-private-deregister-extension.md +++ b//AWSCloudFormation/latest/UserGuide/registry-private-deregister-extension.md @@ -13 +13 @@ You can deregister a specific extension version, or the extension as a whole. To -###### Note +###### Warning @@ -15 +15,10 @@ You can deregister a specific extension version, or the extension as a whole. To -Before you deregister an extension, it's a good idea to use the [describe-type](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/describe-type.html) command to confirm the extension exists. Then, use the [list-stacks](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/list-stacks.html) and [get-template](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/get-template.html) commands to check if any stacks are using the extension before you deregister it. +Deregistering a private extension can't be undone. This action will: + + * Make the extension unusable in all CloudFormation operations. + + * Cause failures in future stack updates that use this extension (for modules and resource types). Although you can reregister the extension privately later, this could cause failures if CloudFormation relies on an earlier version. + + + + +Before proceeding, use the [list-stacks](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/list-stacks.html) and [get-template](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/get-template.html) commands to verify that no active stacks are using this extension. @@ -19 +28 @@ Before you deregister an extension, it's a good idea to use the [describe-type]( -This sections provides examples that show the different ways to deregister private extensions. +This section provides examples that show the different ways to deregister private extensions.