AWS config documentation change
Summary
Updated AWS Config resource reference documentation to add new services (Amazon Bedrock AgentCore, Amazon Comprehend, Amazon GameLift, AWS B2B Data Interchange, AWS Clean Rooms, AWS Deadline Cloud, AWS Organizations) and numerous new resource types across existing services. Reorganized some resource type listings.
Security assessment
Added documentation for security-related features including AWS::GuardDuty::MalwareProtectionPlan, AWS::Connect::SecurityProfile, AWS::SecretsManager::ResourcePolicy, AWS::SecretsManager::RotationSchedule, and AWS::Location::APIKey. However, there's no evidence these changes address specific security vulnerabilities or incidents.
Diff
diff --git a/config/latest/developerguide/resource-config-reference.md b/config/latest/developerguide/resource-config-reference.md index a79b1ee6f..fea32f031 100644 --- a//config/latest/developerguide/resource-config-reference.md +++ b//config/latest/developerguide/resource-config-reference.md @@ -5 +5 @@ -Amazon AppStreamAmazon AppFlowAmazon API GatewayAmazon AthenaAmazon BedrockAmazon CloudFrontAmazon CloudWatchAmazon CodeGuruAmazon CognitoAmazon ConnectAmazon DetectiveAmazon DynamoDBAmazon EC2Amazon ECRAmazon ECSAmazon EFSAmazon EKSAmazon EMRAmazon EventBridgeAmazon ForecastAmazon Fraud DetectorAmazon GuardDutyAmazon InspectorAmazon IVSAmazon KeyspacesAmazon OpenSearch ServiceAmazon PersonalizeAmazon PinpointAmazon QLDBAmazon KendraAmazon KinesisAmazon LexAmazon LightsailAmazon Lookout for MetricsAmazon Lookout for VisionAmazon MacieAmazon Managed GrafanaAmazon Managed Service for PrometheusAmazon MemoryDBAmazon MQAmazon MSKAmazon Quick SuiteAmazon RedshiftAmazon RDSAmazon Route 53Amazon SageMaker AIAmazon SESAmazon SNSAmazon SQSAmazon S3Amazon WorkSpacesAWS AmplifyAWS AppConfigAWS App RunnerAWS App MeshAWS AppSyncAWS Audit ManagerAWS Auto ScalingAWS BackupAWS BatchAWS Billing and Cost ManagementAWS BudgetsAWS Certificate ManagerAWS CloudFormationAWS CloudTrailAWS Cloud9AWS Cloud MapAWS CodeArtifactAWS CodeBuildAWS CodeDeployAWS CodePipelineAWS ConfigAWS DMSAWS DataSyncAWS Device FarmAWS Elastic BeanstalkAWS Entity ResolutionAWS FISAWS Global AcceleratorAWS GlueAWS Ground StationAWS HealthLakeAWS IAMAWS IoTAWS KMSAWS LambdaAWS Mainframe ModernizationAWS Network FirewallAWS Network ManagerAWS PanoramaAWS Private CAAWS Resilience HubAWS Resource ExplorerAWS RoboMakerAWS SignerAWS Secrets ManagerAWS Security Hub CSPMAWS Service CatalogAWS ShieldAWS Step FunctionsAWS Systems ManagerAWS Transfer FamilyAWS WAFAWS X-RayElastic Load BalancingMediaConnectMediaPackageMediaTailor +Amazon AppStreamAmazon AppFlowAmazon API GatewayAmazon AthenaAmazon BedrockAmazon Bedrock AgentCoreAmazon CloudFrontAmazon CloudWatchAmazon CodeGuruAmazon CognitoAmazon ComprehendAmazon ConnectAmazon DetectiveAmazon DynamoDBAmazon EC2Amazon ECRAmazon ECSAmazon EFSAmazon EKSAmazon EMRAmazon EMR ServerlessAmazon EventBridgeAmazon ForecastAmazon Fraud DetectorAmazon GameLiftAmazon GuardDutyAmazon InspectorAmazon IVSAmazon KeyspacesAmazon Location ServiceAmazon OpenSearch ServiceAmazon PersonalizeAmazon PinpointAmazon QLDBAmazon KendraAmazon KinesisAmazon LexAmazon LightsailAmazon Lookout for MetricsAmazon Lookout for VisionAmazon MacieAmazon Managed GrafanaAmazon Managed Service for PrometheusAmazon MemoryDBAmazon MQAmazon MSKAmazon Quick SuiteAmazon RedshiftAmazon RDSAmazon Route 53Amazon SageMaker AIAmazon SESAmazon SNSAmazon SQSAmazon S3Amazon WorkSpacesAWS AmplifyAWS AppConfigAWS App RunnerAWS App MeshAWS AppSyncAWS Audit ManagerAWS Auto ScalingAWS B2B Data InterchangeAWS BackupAWS BatchAWS Billing and Cost ManagementAWS BudgetsAWS Certificate ManagerAWS Clean RoomsAWS CloudFormationAWS CloudTrailAWS Cloud9AWS Cloud MapAWS CodeArtifactAWS CodeBuildAWS CodeDeployAWS CodePipelineAWS ConfigAWS DMSAWS DataSyncAWS Deadline CloudAWS Device FarmAWS Elastic BeanstalkAWS Entity ResolutionAWS FISAWS Global AcceleratorAWS GlueAWS Ground StationAWS HealthLakeAWS IAMAWS IoTAWS KMSAWS LambdaAWS Mainframe ModernizationAWS Network FirewallAWS Network ManagerAWS OrganizationsAWS PanoramaAWS Private CAAWS Resilience HubAWS Resource ExplorerAWS RoboMakerAWS SignerAWS Secrets ManagerAWS Security Hub CSPMAWS Service CatalogAWS ShieldAWS Step FunctionsAWS Systems ManagerAWS Transfer FamilyAWS WAFAWS X-RayElastic Load BalancingMediaConnectMediaPackageMediaTailor @@ -44,3 +44,3 @@ AWS Service | Resource Type Value | Relationship | Related Resource -Amazon AppStream | `AWS::AppStream::DirectoryConfig` | NA | NA -`AWS::AppStream::Application` | NA | NA -`AWS::AppStream::Stack` | NA | NA +Amazon AppStream | `AWS::AppStream::Application` | NA | NA +`AWS::AppStream::AppBlockBuilder` | NA | NA +`AWS::AppStream::DirectoryConfig` | NA | NA @@ -47,0 +48 @@ Amazon AppStream | `AWS::AppStream::DirectoryConfig` | NA | NA +`AWS::AppStream::Stack` | NA | NA @@ -67,0 +69 @@ is associated with | WAFRegional WebACL +`AWS::ApiGateway::Method` | NA | NA Stage @@ -68,0 +71 @@ is associated with | WAFRegional WebACL +`AWS::ApiGateway::UsagePlan` | NA | NA @@ -87 +90,2 @@ AWS Service | Resource Type Value | Relationship | Related Resource -Amazon Bedrock | `AWS::Bedrock::Guardrail` | NA | NA +Amazon Bedrock | `AWS::Bedrock::ApplicationInferenceProfile` | NA | NA +`AWS::Bedrock::Guardrail` | NA | NA @@ -88,0 +93,8 @@ Amazon Bedrock | `AWS::Bedrock::Guardrail` | NA | NA +`AWS::Bedrock::Prompt` | NA | NA + +## Amazon Bedrock AgentCore + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +Amazon Bedrock AgentCore | `AWS::BedrockAgentCore::BrowserCustom` | NA | NA +`AWS::BedrockAgentCore::Runtime` | NA | NA @@ -97,0 +110 @@ IAM Server Certificate +`AWS::CloudFront::KeyValueStore` | NA | NA @@ -132,0 +146,6 @@ Amazon Cognito | `AWS::Cognito::UserPool` | NA | NA +## Amazon Comprehend + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +Amazon Comprehend | `AWS::Comprehend::Flywheel` | NA | NA + @@ -140,0 +160 @@ Amazon Connect | `AWS::Connect::PhoneNumber` | NA | NA +`AWS::Connect::SecurityProfile` | NA | NA @@ -185,0 +206 @@ is contained in | Subnet +`AWS::EC2::SubnetNetworkAclAssociation` | NA | NA @@ -252,0 +274,3 @@ is contained in | Route table +`AWS::EC2::IPAMPoolCidr` | NA | NA +`AWS::EC2::SubnetCidrBlock` | NA | NA +`AWS::EC2::VPCGatewayAttachment` | NA | NA @@ -254 +278 @@ Amazon Elastic Block Store | `AWS::EC2::Volume` | is attached to | EC2 instance -EC2 Image Builder | `AWS::ImageBuilder::ImagePipeline` | NA | NA +EC2 Image Builder | `AWS::ImageBuilder::ContainerRecipe` | NA | NA @@ -256,2 +280 @@ EC2 Image Builder | `AWS::ImageBuilder::ImagePipeline` | NA | NA -`AWS::ImageBuilder::ContainerRecipe` | NA | NA -`AWS::ImageBuilder::InfrastructureConfiguration` | NA | NA +`AWS::ImageBuilder::ImagePipeline` | NA | NA @@ -258,0 +282,2 @@ EC2 Image Builder | `AWS::ImageBuilder::ImagePipeline` | NA | NA +`AWS::ImageBuilder::InfrastructureConfiguration` | NA | NA +`AWS::ImageBuilder::LifecyclePolicy` | NA | NA @@ -268 +293,3 @@ AWS Service | Resource Type Value | Relationship | Related Resource -Amazon Elastic Container Registry | `AWS::ECR::Repository` | NA | NA +Amazon Elastic Container Registry | `AWS::ECR::ReplicationConfiguration` | NA | NA +`AWS::ECR::Repository` | NA | NA +`AWS::ECR::RepositoryCreationTemplate` | NA | NA @@ -309 +336,9 @@ AWS Service | Resource Type Value | Relationship | Related Resource -Amazon EMR | `AWS::EMR::SecurityConfiguration` | NA | NA +Amazon EMR | `AWS::EMR::Studio` | NA | NA +`AWS::EMR::SecurityConfiguration` | NA | NA +Amazon EMR Containers | `AWS::EMRContainers::VirtualCluster` | NA | NA + +## Amazon EMR Serverless + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +Amazon EMR Serverless | `AWS::EMRServerless::Application` | NA | NA @@ -341,0 +377,6 @@ Amazon Fraud Detector | `AWS::FraudDetector::Label` | NA | NA +## Amazon GameLift + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +Amazon GameLift | `AWS::GameLift::Build` | NA | NA + @@ -347,2 +387,0 @@ Amazon GuardDuty | `AWS::GuardDuty::Detector` | NA | NA -`AWS::GuardDuty::ThreatIntelSet` | NA | NA -`AWS::GuardDuty::IPSet` | NA | NA @@ -349,0 +389,3 @@ Amazon GuardDuty | `AWS::GuardDuty::Detector` | NA | NA +`AWS::GuardDuty::IPSet` | NA | NA +`AWS::GuardDuty::MalwareProtectionPlan` | NA | NA +`AWS::GuardDuty::ThreatIntelSet` | NA | NA @@ -371,0 +414,6 @@ Amazon Keyspaces (for Apache Cassandra) | `AWS::Cassandra::Keyspace` | NA | NA +## Amazon Location Service + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +Amazon Location Service | `AWS::Location::APIKey` | NA | NA + @@ -501,0 +550 @@ Amazon Managed Streaming for Apache Kafka | `AWS::MSK::Cluster` | NA | NA +`AWS::MSK::ServerlessCluster` | NA | NA @@ -561 +610,2 @@ AWS Service | Resource Type Value | Relationship | Related Resource -Amazon Route 53 | `AWS::Route53::HostedZone` | NA | NA +Amazon Route 53 | `AWS::Route53::DNSSEC` | NA | NA +`AWS::Route53::HostedZone` | NA | NA @@ -586 +636,3 @@ AWS Service | Resource Type Value | Relationship | Related Resource -Amazon SageMaker AI | `AWS::SageMaker::CodeRepository` | NA | NA +Amazon SageMaker AI | `AWS::SageMaker::AppImageConfig` | NA | NA +`AWS::SageMaker::CodeRepository` | NA | NA +`AWS::SageMaker::DataQualityJobDefinition` | NA | NA @@ -588 +640,2 @@ Amazon SageMaker AI | `AWS::SageMaker::CodeRepository` | NA | NA -`AWS::SageMaker::AppImageConfig` | NA | NA +`AWS::SageMaker::EndpointConfig` | NA | NA +`AWS::SageMaker::FeatureGroup` | NA | NA @@ -589,0 +643,2 @@ Amazon SageMaker AI | `AWS::SageMaker::CodeRepository` | NA | NA +`AWS::SageMaker::InferenceExperiment` | NA | NA +`AWS::SageMaker::MlflowTrackingServer` | NA | NA @@ -590,0 +646,3 @@ Amazon SageMaker AI | `AWS::SageMaker::CodeRepository` | NA | NA +`AWS::SageMaker::ModelBiasJobDefinition` | NA | NA +`AWS::SageMaker::ModelExplainabilityJobDefinition` | NA | NA +`AWS::SageMaker::ModelQualityJobDefinition` | NA | NA @@ -593 +651,2 @@ Amazon SageMaker AI | `AWS::SageMaker::CodeRepository` | NA | NA -`AWS::SageMaker::EndpointConfig` | NA | NA +`AWS::SageMaker::StudioLifecycleConfig` | NA | NA +`AWS::SageMaker::UserProfile` | NA | NA @@ -595,2 +653,0 @@ Amazon SageMaker AI | `AWS::SageMaker::CodeRepository` | NA | NA -`AWS::SageMaker::FeatureGroup` | NA | NA -`AWS::SageMaker::InferenceExperiment` | NA | NA @@ -603,0 +661,2 @@ Amazon Simple Email Service | `AWS::SES::ConfigurationSet` | NA | NA +`AWS::SES::DedicatedIpPool` | NA | NA +`AWS::SES::MailManagerTrafficPolicy` | NA | NA @@ -627,0 +687,3 @@ Amazon Simple Storage Service | `AWS::S3::Bucket*` | NA | NA +`AWS::S3::AccessGrant` | NA | NA +`AWS::S3::AccessGrantsInstance` | NA | NA +`AWS::S3::AccessGrantsLocation` | NA | NA @@ -630,0 +693 @@ Amazon Simple Storage Service | `AWS::S3::Bucket*` | NA | NA +`AWS::S3Tables::TableBucketPolicy` | NA | NA @@ -679,0 +743 @@ AWS AppConfig | `AWS::AppConfig::Application` | NA | NA +`AWS::AppConfig::Extension` | NA | NA @@ -726,0 +791,6 @@ Alarm +## AWS B2B Data Interchange + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +AWS B2B Data Interchange | `AWS::B2BI::Capability` | NA | NA + @@ -770,0 +841,6 @@ AWS Certificate Manager | `AWS::ACM::Certificate` | NA | NA +## AWS Clean Rooms + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +AWS Clean Rooms ML | `AWS::CleanRoomsML::TrainingDataset` | NA | NA + @@ -775,0 +852 @@ CloudFormation | `AWS::CloudFormation::GuardHook` | NA | NA +`AWS::CloudFormation::LambdaHook` | NA | NA @@ -776,0 +854 @@ CloudFormation | `AWS::CloudFormation::GuardHook` | NA | NA +`AWS::CloudFormation::StackSet` | NA | NA @@ -848 +926,2 @@ AWS Service | Resource Type Value | Relationship | Related Resource -AWS Config | `AWS::Config::ResourceCompliance`* | is associated with | All resources* +AWS Config | `AWS::Config::AggregationAuthorization` | NA | NA +`AWS::Config::ResourceCompliance`* | is associated with | All resources* @@ -877 +956,2 @@ AWS Service | Resource Type Value | Relationship | Related Resource -AWS DataSync | `AWS::DataSync::LocationSMB` | NA | NA +AWS DataSync | `AWS::DataSync::Agent` | NA | NA +`AWS::DataSync::LocationSMB` | NA | NA @@ -886,0 +967,8 @@ AWS DataSync | `AWS::DataSync::LocationSMB` | NA | NA +## AWS Deadline Cloud + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +AWS Deadline Cloud | `AWS::Deadline::Fleet` | NA | NA +`AWS::Deadline::Monitor` | NA | NA +`AWS::Deadline::QueueFleetAssociation` | NA | NA + @@ -914,0 +1003 @@ AWS Entity Resolution | `AWS::EntityResolution::IdMappingWorkflow` | NA | NA +`AWS::EntityResolution::MatchingWorkflow` | NA | NA @@ -971 +1060,2 @@ AWS Identity and Access Management Access Analyzer | `AWS::AccessAnalyzer::Analy -AWS Identity and Access Management Roles Anywhere | `AWS::RolesAnywhere::TrustAnchor` | NA | NA +AWS Identity and Access Management Roles Anywhere | `AWS::RolesAnywhere::Profile` | NA | NA +`AWS::RolesAnywhere::TrustAnchor` | NA | NA @@ -991,0 +1082 @@ AWS IoT | `AWS::IoT::AccountAuditConfiguration` | NA | NA +`AWS::IoT::ThingGroup` | NA | NA @@ -996,0 +1088 @@ AWS IoT Core | `AWS::IoT::FleetMetric` | NA | NA +AWS IoT Core Device Advisor | `AWS::IoTCoreDeviceAdvisor::SuiteDefinition` | NA | NA @@ -1009,3 +1101 @@ AWS IoT TwinMaker | `AWS::IoTTwinMaker::Workspace` | NA | NA -AWS IoT SiteWise | `AWS::IoTSiteWise::Dashboard` | NA | NA -`AWS::IoTSiteWise::Project` | NA | NA -`AWS::IoTSiteWise::Portal` | NA | NA +AWS IoT SiteWise | `AWS::IoTSiteWise::Asset` | NA | NA @@ -1012,0 +1103,3 @@ AWS IoT SiteWise | `AWS::IoTSiteWise::Dashboard` | NA | NA +`AWS::IoTSiteWise::Dashboard` | NA | NA +`AWS::IoTSiteWise::Portal` | NA | NA +`AWS::IoTSiteWise::Project` | NA | NA @@ -1061,0 +1155,6 @@ AWS Network Manager | `AWS::NetworkManager::TransitGatewayRegistration` | NA | N +## AWS Organizations + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +AWS Organizations | `AWS::Organizations::OrganizationalUnit` | NA | NA + @@ -1074 +1173,2 @@ AWS Private Certificate Authority | `AWS::ACMPCA::CertificateAuthority` | NA | N -AWS Private CA Connector for Active Directory | `AWS::PCAConnectorAD::DirectoryRegistration` | NA | NA