AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-11-22 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.md

Summary

Added BGP logging configuration options (BgpLogEnabled, BgpLogGroupArn, BgpLogOutputFormat)

Security assessment

The changes enable monitoring of BGP sessions through CloudWatch logging, which supports security monitoring but does not directly address a specific security vulnerability.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.md
index 0f5a6debc..536024ee7 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.md
@@ -18,0 +19,3 @@ To declare this entity in your CloudFormation template, use the following syntax
+      "BgpLogEnabled" : Boolean,
+      "BgpLogGroupArn" : String,
+      "BgpLogOutputFormat" : String,
@@ -27,0 +31,3 @@ To declare this entity in your CloudFormation template, use the following syntax
+      BgpLogEnabled: Boolean
+      BgpLogGroupArn: String
+      BgpLogOutputFormat: String
@@ -34,0 +41,39 @@ To declare this entity in your CloudFormation template, use the following syntax
+`BgpLogEnabled`
+    
+
+Specifies whether to enable BGP logging for the VPN connection. Default value is `False`.
+
+Valid values: `True` | `False`
+
+_Required_ : No
+
+ _Type_ : Boolean
+
+ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)
+
+`BgpLogGroupArn`
+    
+
+The Amazon Resource Name (ARN) of the CloudWatch log group where BGP logs will be sent.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)
+
+`BgpLogOutputFormat`
+    
+
+The desired output format for BGP logs to be sent to CloudWatch. Default format is `json`.
+
+Valid values: `json` | `text`
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Allowed values_ : `json | text`
+
+ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)
+