AWS cli documentation change
Summary
Updated CLI version reference, clarified template parameter conditions, added note about AWS::LanguageExtensions transform usage, and improved documentation formatting/grammar
Security assessment
The change adds guidance about using 'AWS::LanguageExtensions' transform instead of 'UsePreviousTemplate' to ensure parameter updates are applied correctly. While this improves security posture by preventing misconfigurations, there's no explicit mention of a specific security vulnerability being addressed. The IAM capability clarification is routine documentation.
Diff
diff --git a/cli/latest/reference/cloudformation/create-change-set.md b/cli/latest/reference/cloudformation/create-change-set.md index 1be2402af..4192c7d42 100644 --- a//cli/latest/reference/cloudformation/create-change-set.md +++ b//cli/latest/reference/cloudformation/create-change-set.md @@ -15 +15 @@ - * [AWS CLI 2.31.35 Command Reference](../../index.html) » + * [AWS CLI 2.31.37 Command Reference](../../index.html) » @@ -132 +132 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf -> Conditional: You must specify only `TemplateBody` or `TemplateURL` . +> Conditional: You must specify only one of the following parameters: `TemplateBody` , `TemplateURL` , or set the `UsePreviousTemplate` to `true` . @@ -144 +144 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf -> Conditional: You must specify only `TemplateBody` or `TemplateURL` . +> Conditional: You must specify only one of the following parameters: `TemplateBody` , `TemplateURL` , or set the `UsePreviousTemplate` to `true` . @@ -155,0 +156,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf +> +> When using templates with the `AWS::LanguageExtensions` transform, provide the template instead of using `UsePreviousTemplate` to ensure new parameter values and Systems Manager parameter updates are applied correctly. For more information, see [AWS::LanguageExtensions transform](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/transform-aws-languageextensions.html) . +> +> Conditional: You must specify only one of the following parameters: `TemplateBody` , `TemplateURL` , or set the `UsePreviousTemplate` to `true` . @@ -163 +167 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf ->> The Parameter data type. +>> The `Parameter` data type. @@ -205 +209 @@ JSON Syntax: -> * `CAPABILITY_IAM` and `CAPABILITY_NAMED_IAM` Some stack templates might include resources that can affect permissions in your Amazon Web Services account; for example, by creating new IAM users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities. The following IAM resources require you to specify either the `CAPABILITY_IAM` or `CAPABILITY_NAMED_IAM` capability. +> * `CAPABILITY_IAM` and `CAPABILITY_NAMED_IAM` Some stack templates might include resources that can affect permissions in your Amazon Web Services account, for example, by creating new IAM users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities. The following IAM resources require you to specify either the `CAPABILITY_IAM` or `CAPABILITY_NAMED_IAM` capability. @@ -259 +263 @@ Syntax: -> The template resource types that you have permissions to work with if you execute this change set, such as `AWS::EC2::Instance` , `AWS::EC2::*` , or `Custom::MyCustomInstance` . +> Specifies which resource types you can work with, such as `AWS::EC2::Instance` or `Custom::MyCustomInstance` . @@ -261 +265 @@ Syntax: -> If the list of resource types doesn’t include a resource type that you’re updating, the stack update fails. By default, CloudFormation grants permissions to all resource types. IAM uses this parameter for condition keys in IAM policies for CloudFormation. For more information, see [Control access with Identity and Access Management](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html) in the _CloudFormation User Guide_ . +> If the list of resource types doesn’t include a resource type that you’re updating, the stack update fails. By default, CloudFormation grants permissions to all resource types. IAM uses this parameter for condition keys in IAM policies for CloudFormation. For more information, see [Control CloudFormation access with Identity and Access Management](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html) in the _CloudFormation User Guide_ . @@ -758 +762 @@ StackId -> (string) - * [AWS CLI 2.31.35 Command Reference](../../index.html) » + * [AWS CLI 2.31.37 Command Reference](../../index.html) »