AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-10-28 · Documentation low

File: AWSCloudFormation/latest/TemplateReference/aws-properties-datazone-connection-awslocation.md

Summary

Updated IAM role ARN pattern validation regex to enforce stricter path formatting

Security assessment

The change modifies the regex pattern for IAM role ARNs to require stricter path formatting. While this improves validation accuracy, there is no explicit evidence of a resolved security vulnerability in the diff.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-datazone-connection-awslocation.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-datazone-connection-awslocation.md
index 5a4cad541..31d79f496 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-datazone-connection-awslocation.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-datazone-connection-awslocation.md
@@ -46 +46 @@ _Required_ : No
- _Pattern_ : `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
+ _Pattern_ : `^arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+$`