AWS cdk documentation change
Summary
Changed 'AWS CloudFormation custom resource' to 'CloudFormation custom resource' in deployment permissions context
Security assessment
The change is a terminology update without altering technical meaning. The content discusses deployment-time permissions requirements but doesn't introduce or modify security controls, vulnerabilities, or security-related guidance.
Diff
diff --git a/cdk/v1/guide/permissions.md b/cdk/v1/guide/permissions.md index 3da182f13..8e61ab93f 100644 --- a//cdk/v1/guide/permissions.md +++ b//cdk/v1/guide/permissions.md @@ -82 +82 @@ C# -Sometimes permissions must be applied while your stack is being deployed. One such case is when you grant a AWS CloudFormation custom resource access to some other resource. The custom resource will be invoked during deployment, so it must have the specified permissions at deployment time. Another case is when a service verifies that the role you pass to it has the right policies applied (a number of AWS services do this to make sure you didn't forget to set the policies). In those cases, the deployment may fail if the permissions are applied too late. +Sometimes permissions must be applied while your stack is being deployed. One such case is when you grant a CloudFormation custom resource access to some other resource. The custom resource will be invoked during deployment, so it must have the specified permissions at deployment time. Another case is when a service verifies that the role you pass to it has the right policies applied (a number of AWS services do this to make sure you didn't forget to set the policies). In those cases, the deployment may fail if the permissions are applied too late.