AWS AWSCloudFormation medium security documentation change

Service: AWSCloudFormation · 2025-11-25 · Security-related medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-glue-securityconfiguration-jobbookmarksencryption.md

Summary

Updated KMS key ARN pattern validation to require strict 'arn:aws:kms:' format

Security assessment

Strengthens encryption requirements for job bookmarks, reducing exposure of sensitive metadata.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-glue-securityconfiguration-jobbookmarksencryption.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-glue-securityconfiguration-jobbookmarksencryption.md
index faf6918d5..b05c00c43 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-glue-securityconfiguration-jobbookmarksencryption.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-glue-securityconfiguration-jobbookmarksencryption.md
@@ -55 +55 @@ _Required_ : No
- _Pattern_ : `^$|arn:aws[a-z0-9-]*:kms:.*`
+ _Pattern_ : `arn:aws:kms:.*`