AWS AWSCloudFormation documentation change
Summary
Added 'ForceDelete' and 'KmsKeyId' properties to the resource definition, including documentation for KMS key pattern and update requirements.
Security assessment
The addition of 'KmsKeyId' introduces encryption configuration, which is a security feature. However, there is no evidence this addresses a specific security vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrock-automatedreasoningpolicy.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrock-automatedreasoningpolicy.md index ef0e2f0d1..64a963185 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrock-automatedreasoningpolicy.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrock-automatedreasoningpolicy.md @@ -25,0 +26,2 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "ForceDelete" : Boolean, + "KmsKeyId" : String, @@ -38,0 +41,2 @@ To declare this entity in your AWS CloudFormation template, use the following sy + ForceDelete: Boolean + KmsKeyId: String @@ -62,0 +67,28 @@ _Maximum_ : `1024` +`ForceDelete` + + +Property description not available. + +_Required_ : No + + _Type_ : Boolean + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + +`KmsKeyId` + + +Property description not available. + +_Required_ : No + + _Type_ : String + + _Pattern_ : `^(arn:aws(-[^:]+)?:kms:[a-zA-Z0-9-]*:[0-9]{12}:((key/[a-zA-Z0-9-]{36})|(alias/[a-zA-Z0-9-_/]+)))|([a-zA-Z0-9-]{36})|(alias/[a-zA-Z0-9-_/]+)$` + +_Minimum_ : `1` + + _Maximum_ : `2048` + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + @@ -123,0 +156,5 @@ A hash of the policy definition used to identify the version. +`KmsKeyArn` + + +Property description not available. +