AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-12-07 · Documentation low

File: AWSCloudFormation/latest/UserGuide/template-custom-resources.md

Summary

Updated documentation links and consolidated request/response reference documentation. Changed 'Amazon Simple Storage Service URL' to 'Amazon S3 bucket URL' for clarity. Removed redundant section headers and reorganized content structure.

Security assessment

The changes primarily involve documentation restructuring, URL updates, and link consolidation. No security vulnerabilities, mitigations, or new security features are mentioned. The timeout configuration example (ServiceTimeout) describes existing functionality rather than addressing a security issue.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/template-custom-resources.md b/AWSCloudFormation/latest/UserGuide/template-custom-resources.md
index e0d94bdb6..5f72e677c 100644
--- a//AWSCloudFormation/latest/UserGuide/template-custom-resources.md
+++ b//AWSCloudFormation/latest/UserGuide/template-custom-resources.md
@@ -13 +13 @@ For example, you might want to include resources that aren't available as CloudF
-To define a custom resource in your CloudFormation template, you use the [`AWS::CloudFormation::CustomResource`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-customresource.html) or [`Custom::`MyCustomResourceTypeName``](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-customresource.html#aws-resource-cloudformation-customresource--remarks) resource type. Custom resources require one property, the service token, which specifies where CloudFormation sends requests to, such as an Amazon SNS topic or a Lambda function.
+To define a custom resource in your CloudFormation template, you use the [AWS::CloudFormation::CustomResource](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-customresource.html) or [Custom::MyCustomResourceTypeName](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-customresource.html#aws-resource-cloudformation-customresource--remarks) resource type. Custom resources require one property, the service token, which specifies where CloudFormation sends requests to, such as an Amazon SNS topic or a Lambda function.
@@ -22,0 +23,2 @@ The following topics provide information on how to use custom resources.
+  * [CloudFormation custom resource request and response reference](./crpg-ref.html)
+
@@ -27,2 +28,0 @@ The following topics provide information on how to use custom resources.
-  * [Custom resource reference](./crpg-ref.html)
-
@@ -77 +77 @@ The following summarizes the flow for creating a stack from the template:
-  1. CloudFormation sends a request to the specified service token. The request includes information such as the request type and a pre-signed Amazon Simple Storage Service URL, where the custom resource sends responses to. For more information about what's included in the request, see [Custom resource request objects](./crpg-ref-requests.html).
+  1. CloudFormation sends a request to the specified service token. The request includes information such as the request type and a pre-signed Amazon S3 bucket URL, where the custom resource sends responses to. For more information about what's included in the request, see [CloudFormation custom resource request and response reference](./crpg-ref.html).
@@ -96 +96 @@ The following sample data shows what CloudFormation includes in a `Create` reque
-In the response, the custom resource provider can also include name-value pairs that the template developer can access. For example, the response can include output data if the request succeeded or an error message if the request failed. For more information about responses, see [Custom resource response objects](./crpg-ref-responses.html).
+In the response, the custom resource provider can also include name-value pairs that the template developer can access. For example, the response can include output data if the request succeeded or an error message if the request failed. For more information about responses, see [CloudFormation custom resource request and response reference](./crpg-ref.html).
@@ -133 +133 @@ The default timeout for your custom resource is 3600 seconds (1 hour). If no res
-You can adjust the timeout value based on how long you expect the response from the custom resource will take. For example, when provisioning a custom resource that invokes a Lambda function that's expected to respond within five minutes, you can set a timeout of five minutes in the stack template by specifying the `ServiceTimeout` property. For more information, see [Custom resource request objects](./crpg-ref-requests.html). This way, if there's an error in the Lambda function that causes it to get stuck, CloudFormation will fail the stack operation after five minutes instead of waiting the full hour. 
+You can adjust the timeout value based on how long you expect the response from the custom resource will take. For example, when provisioning a custom resource that invokes a Lambda function that's expected to respond within five minutes, you can set a timeout of five minutes in the stack template by specifying the `ServiceTimeout` property. For more information, see [CloudFormation custom resource request and response reference](./crpg-ref.html). This way, if there's an error in the Lambda function that causes it to get stuck, CloudFormation will fail the stack operation after five minutes instead of waiting the full hour. 
@@ -145 +145 @@ Use CloudFormation-supplied resource types
-Amazon SNS-backed custom resources
+Request and response reference