AWS AWSCloudFormation medium security documentation change
Summary
Added detailed documentation for JWT validation claims including claim format restrictions, reserved claim names, and value constraints
Security assessment
The changes explicitly document security constraints for JWT claim validation including reserved claims (exp, iss, nbf, iat) and format-specific value restrictions. This prevents security misconfigurations in JWT validation implementations.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim.md index fcf80d07d..8e2d67cd2 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim.md @@ -9 +9 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `JwtValidationActionAdditionalClaim` property type specifies Property description not available. for an [AWS::ElasticLoadBalancingV2::ListenerRule](./aws-resource-elasticloadbalancingv2-listenerrule.html). +Information about an additional claim to validate. @@ -39 +39 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The format of the claim value. @@ -44,0 +45,2 @@ _Required_ : Yes + _Allowed values_ : `single-string | string-array | space-separated-values` + @@ -50 +52 @@ _Required_ : Yes -Property description not available. +The name of the claim. You can't specify `exp`, `iss`, `nbf`, or `iat` because we validate them by default. @@ -61 +63 @@ _Required_ : Yes -Property description not available. +The claim value. The maximum size of the list is 10. Each value can be up to 256 characters in length. If the format is `space-separated-values`, the values can't include spaces.