AWS AWSCloudFormation documentation change
Summary
Added detailed description of DeletionSettings, including note about DeletionPolicy/UpdateReplacePolicy behavior when 'Retain' is specified.
Security assessment
Clarifies resource retention behavior, which relates to data lifecycle management and security best practices. No evidence of addressing a specific vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-imagebuilder-image-deletionsettings.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-imagebuilder-image-deletionsettings.md index f47237e9e..aff0f11c9 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-imagebuilder-image-deletionsettings.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-imagebuilder-image-deletionsettings.md @@ -9 +9,5 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `DeletionSettings` property type specifies Property description not available. for an [AWS::ImageBuilder::Image](./aws-resource-imagebuilder-image.html). +Contains deletion settings of underlying resources of an image when it is replaced or deleted, including its Amazon Machine Images (AMIs), snapshots, or containers. + +###### Note + +If you specify the `Retain` option in the [DeletionPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-updatereplacepolicy.html) or [UpdateReplacePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-deletionpolicy.html), the deletion of underlying resources will not be executed. @@ -34 +38 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The name or Amazon Resource Name (ARN) for the IAM role you create that grants Image Builder access to delete the image and its underlying resources.