AWS AWSCloudFormation documentation change
Summary
Added EncryptionKeyArn property documentation with example KMS key ARN and updated terminology from 'AWS CloudFormation' to 'CloudFormation'
Security assessment
The change adds documentation about server-side encryption key usage (EncryptionKeyArn) with a concrete KMS example, which relates to security best practices for data protection. However, there's no evidence this addresses a specific security vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-backup-logicallyairgappedbackupvault.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-backup-logicallyairgappedbackupvault.md index 85ed71402..19e0f435d 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-backup-logicallyairgappedbackupvault.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-backup-logicallyairgappedbackupvault.md @@ -5 +5 @@ SyntaxPropertiesReturn values -This is the new _AWS CloudFormation Template Reference Guide_. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html). +This is the new _CloudFormation Template Reference Guide_. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html). @@ -19 +19 @@ Do not include sensitive data, such as passport numbers, in the name of a backup -To declare this entity in your AWS CloudFormation template, use the following syntax: +To declare this entity in your CloudFormation template, use the following syntax: @@ -29,0 +30 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "EncryptionKeyArn" : String, @@ -46,0 +48 @@ To declare this entity in your AWS CloudFormation template, use the following sy + EncryptionKeyArn: String @@ -92,0 +95,11 @@ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormat +`EncryptionKeyArn` + + +The server-side encryption key that is used to protect your backups; for example, `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`. + +_Required_ : No + + _Type_ : String + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + @@ -160,5 +172,0 @@ The ARN of the backup vault. -`EncryptionKeyArn` - - -The ARN of the server-side encryption key. -