AWS secretsmanager documentation change
Summary
Updated terminology: replaced 'AWS CloudFormation' with 'CloudFormation' throughout the document
Security assessment
Changes are purely terminological updates without security implications. The warning about backslashes in dynamic references remains unchanged and doesn't indicate a new vulnerability.
Diff
diff --git a/secretsmanager/latest/userguide/cfn-example_reference-secret.md b/secretsmanager/latest/userguide/cfn-example_reference-secret.md index 55e2332b6..73b046ffa 100644 --- a//secretsmanager/latest/userguide/cfn-example_reference-secret.md +++ b//secretsmanager/latest/userguide/cfn-example_reference-secret.md @@ -5 +5 @@ -# Get an AWS Secrets Manager secret in an AWS CloudFormation resource +# Get an AWS Secrets Manager secret in an CloudFormation resource @@ -7 +7 @@ -With AWS CloudFormation, you can retrieve a secret to use in another AWS CloudFormation resource. A common scenario is to first create a secret with a password generated by Secrets Manager, and then retrieve the username and password from the secret to use as credentials for a new database. For information about creating secrets with AWS CloudFormation, see [Create AWS Secrets Manager secrets in AWS CloudFormation](./cloudformation.html). +With CloudFormation, you can retrieve a secret to use in another CloudFormation resource. A common scenario is to first create a secret with a password generated by Secrets Manager, and then retrieve the username and password from the secret to use as credentials for a new database. For information about creating secrets with CloudFormation, see [Create AWS Secrets Manager secrets in AWS CloudFormation](./cloudformation.html). @@ -9 +9 @@ With AWS CloudFormation, you can retrieve a secret to use in another AWS CloudFo -To retrieve a secret in an AWS CloudFormation template, you use a _dynamic reference_. When you create the stack, the dynamic reference pulls the secret value into the AWS CloudFormation resource, so you don't have to hardcode the secret information. Instead, you refer to the secret by name or ARN. You can use a dynamic reference for a secret in any resource property. You can't use a dynamic reference for a secret in resource metadata such as [`AWS::CloudFormation::Init`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-init.html) because that would make the secret value visible in the console. +To retrieve a secret in an CloudFormation template, you use a _dynamic reference_. When you create the stack, the dynamic reference pulls the secret value into the CloudFormation resource, so you don't have to hardcode the secret information. Instead, you refer to the secret by name or ARN. You can use a dynamic reference for a secret in any resource property. You can't use a dynamic reference for a secret in resource metadata such as [`AWS::CloudFormation::Init`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-init.html) because that would make the secret value visible in the console. @@ -24 +24 @@ The name or ARN of the secret. To access a secret in your AWS account, you can u -The key name of the key-value pair whose value you want to retrieve. If you don't specify a `json-key`, AWS CloudFormation retrieves the entire secret text. This segment may not include the colon character ( `:`). +The key name of the key-value pair whose value you want to retrieve. If you don't specify a `json-key`, CloudFormation retrieves the entire secret text. This segment may not include the colon character ( `:`). @@ -40 +40 @@ For more information, see [Using dynamic references to specify Secrets Manager s -Do not create a dynamic reference using a backslash `(\)` as the final value. AWS CloudFormation can't resolve those references, which causes a resource failure. +Do not create a dynamic reference using a backslash `(\)` as the final value. CloudFormation can't resolve those references, which causes a resource failure.