AWS AWSCloudFormation documentation change
Summary
Updated terminology from 'AWS CloudFormation' to 'CloudFormation' throughout document, modified link text, and clarified YAML/JSON policy handling
Security assessment
Changes are branding/terminology updates and documentation clarifications without addressing security vulnerabilities or introducing security features. The DependsOn clarification relates to resource lifecycle management rather than security controls.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-managedpolicy.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-managedpolicy.md index f33fb228f..5d3ad4ef8 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-iam-managedpolicy.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-iam-managedpolicy.md @@ -5 +5 @@ SyntaxPropertiesReturn valuesExamplesSee also -This is the new _AWS CloudFormation Template Reference Guide_. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html). +This is the new _CloudFormation Template Reference Guide_. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html). @@ -19 +19 @@ For more information about managed policies in general, see [Managed policies an -To declare this entity in your AWS CloudFormation template, use the following syntax: +To declare this entity in your CloudFormation template, use the following syntax: @@ -102 +102 @@ If you specify a name, you cannot perform updates that require replacement of th -If you specify a name, you must specify the `CAPABILITY_NAMED_IAM` value to acknowledge your template's capabilities. For more information, see [Acknowledging IAM Resources in AWS CloudFormation Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities). +If you specify a name, you must specify the `CAPABILITY_NAMED_IAM` value to acknowledge your template's capabilities. For more information, see [Acknowledging IAM Resources in CloudFormation Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities). @@ -146 +146 @@ The JSON policy document that you want to use as the content for the new policy. -You must provide policies in JSON format in IAM. However, for AWS CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. AWS CloudFormation always converts a YAML policy to JSON format before submitting it to IAM. +You must provide policies in JSON format in IAM. However, for CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. CloudFormation always converts a YAML policy to JSON format before submitting it to IAM. @@ -184 +184 @@ This parameter allows (per its [regex pattern](http://wikipedia.org/wiki/regex)) -If an external policy (such as `AWS::IAM::Policy` or `AWS::IAM::ManagedPolicy`) has a `Ref` to a role and if a resource (such as `AWS::ECS::Service`) also has a `Ref` to the same role, add a `DependsOn` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an `AWS::ECS::Service` resource, the `DependsOn` attribute ensures that AWS CloudFormation deletes the `AWS::ECS::Service` resource before deleting its role's policy. +If an external policy (such as `AWS::IAM::Policy` or `AWS::IAM::ManagedPolicy`) has a `Ref` to a role and if a resource (such as `AWS::ECS::Service`) also has a `Ref` to the same role, add a `DependsOn` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an `AWS::ECS::Service` resource, the `DependsOn` attribute ensures that CloudFormation deletes the `AWS::ECS::Service` resource before deleting its role's policy.