AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-11-22 · Documentation low

File: AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourceconfiguration.md

Summary

Added new properties: CustomDomainName, DomainVerificationId, and GroupDomain with validation rules

Security assessment

Domain verification (DomainVerificationId with pattern validation) and group domain inheritance are security-adjacent features that help prevent domain spoofing and ensure proper resource isolation. However, there's no evidence this addresses a specific disclosed vulnerability.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourceconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourceconfiguration.md
index 854d7ada9..71d07e5dd 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourceconfiguration.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourceconfiguration.md
@@ -21,0 +22,3 @@ To declare this entity in your CloudFormation template, use the following syntax
+          "CustomDomainName" : String,
+          "DomainVerificationId" : String,
+          "GroupDomain" : String,
@@ -40,0 +44,3 @@ To declare this entity in your CloudFormation template, use the following syntax
+      CustomDomainName: String
+      DomainVerificationId: String
+      GroupDomain: String
@@ -67,0 +74,47 @@ _Required_ : No
+`CustomDomainName`
+    
+
+The custom domain name. 
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Minimum_ : `3`
+
+ _Maximum_ : `255`
+
+ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)
+
+`DomainVerificationId`
+    
+
+The domain verification ID. 
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Pattern_ : `^dv-[a-fA-F0-9]{17}$`
+
+_Minimum_ : `20`
+
+ _Maximum_ : `20`
+
+ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)
+
+`GroupDomain`
+    
+
+(GROUP) The group domain for a group resource configuration. Any domains that you create for the child resource are subdomains of the group domain. Child resources inherit the verification status of the domain. 
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Minimum_ : `3`
+
+ _Maximum_ : `255`
+
+ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)
+