AWS Security ChangesHomeSearch

AWS AWSCloudFormation medium security documentation change

Service: AWSCloudFormation · 2026-02-13 · Security-related medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-directoryservice-simplead-tag.md

Summary

Renamed and updated documentation for tag properties in DirectoryService SimpleAD. Added validation constraints for tag keys (cannot use 'aws:' prefix, length 1-128) and values (length 0-256).

Security assessment

Added explicit security constraint prohibiting 'aws:' prefix in tag keys, which prevents overwriting AWS-internal tags and maintains tag security boundaries. Also added length validation to prevent potential abuse through excessively long tags.

Diff