AWS AWSCloudFormation documentation change
Summary
Added new properties: CustomDomainName, DomainVerificationId, and GroupDomain with validation rules
Security assessment
Domain verification (DomainVerificationId with pattern validation) and group domain inheritance are security-adjacent features that help prevent domain spoofing and ensure proper resource isolation. However, there's no evidence this addresses a specific disclosed vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourceconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourceconfiguration.md index 854d7ada9..71d07e5dd 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourceconfiguration.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourceconfiguration.md @@ -21,0 +22,3 @@ To declare this entity in your CloudFormation template, use the following syntax + "CustomDomainName" : String, + "DomainVerificationId" : String, + "GroupDomain" : String, @@ -40,0 +44,3 @@ To declare this entity in your CloudFormation template, use the following syntax + CustomDomainName: String + DomainVerificationId: String + GroupDomain: String @@ -67,0 +74,47 @@ _Required_ : No +`CustomDomainName` + + +The custom domain name. + +_Required_ : No + + _Type_ : String + + _Minimum_ : `3` + + _Maximum_ : `255` + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + +`DomainVerificationId` + + +The domain verification ID. + +_Required_ : No + + _Type_ : String + + _Pattern_ : `^dv-[a-fA-F0-9]{17}$` + +_Minimum_ : `20` + + _Maximum_ : `20` + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + +`GroupDomain` + + +(GROUP) The group domain for a group resource configuration. Any domains that you create for the child resource are subdomains of the group domain. Child resources inherit the verification status of the domain. + +_Required_ : No + + _Type_ : String + + _Minimum_ : `3` + + _Maximum_ : `255` + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) +