AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-11-22 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-restapi.md

Summary

Added EndpointAccessMode and SecurityPolicy configuration properties

Security assessment

Added SecurityPolicy property enables TLS version/cipher suite configuration, enhancing security documentation. However, no evidence this addresses a specific vulnerability.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-restapi.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-restapi.md
index 5db5341b8..661e5268c 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-restapi.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-restapi.md
@@ -31,0 +32 @@ To declare this entity in your CloudFormation template, use the following syntax
+          "EndpointAccessMode" : String,
@@ -38,0 +40 @@ To declare this entity in your CloudFormation template, use the following syntax
+          "SecurityPolicy" : String,
@@ -57,0 +60 @@ To declare this entity in your CloudFormation template, use the following syntax
+      EndpointAccessMode: String
@@ -66,0 +70 @@ To declare this entity in your CloudFormation template, use the following syntax
+      SecurityPolicy: String
@@ -149,0 +154,11 @@ _Required_ : No
+`EndpointAccessMode`
+    
+
+The endpoint access mode for your RestApi.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
@@ -237,0 +253,11 @@ _Required_ : No
+
+`SecurityPolicy`
+    
+
+The Transport Layer Security (TLS) version + cipher suite for this RestApi.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)