AWS Security ChangesHomeSearch

AWS solutions documentation change

Service: solutions · 2026-02-22 · Documentation low

File: solutions/latest/cloud-migration-factory-on-aws/step-2-launch-the-stack.md

Summary

Added two new CloudFormation parameters: Wave Planning Manager toggle and Bedrock Guardrail deployment option.

Security assessment

Documents a security feature (Bedrock Guardrail) but doesn't indicate it's addressing a specific vulnerability. The guardrail parameter enables/disables security controls without evidence of patching an exploit.

Diff

diff --git a/solutions/latest/cloud-migration-factory-on-aws/step-2-launch-the-stack.md b/solutions/latest/cloud-migration-factory-on-aws/step-2-launch-the-stack.md
index 0ed39d940..4cb372656 100644
--- a//solutions/latest/cloud-migration-factory-on-aws/step-2-launch-the-stack.md
+++ b//solutions/latest/cloud-migration-factory-on-aws/step-2-launch-the-stack.md
@@ -62,0 +63,2 @@ Parameter | Default | Description
+**WPM (Wave Planning Manager)** |  `true` |  By default, the Wave Planning Manager is deployed, but you can deactivate it by changing this parameter to `false`.  
+**Deploy Bedrock Guardrail** |  `true` |  By default, the Bedrock Guardrail is deployed, which help enforce security controls and compliance policies for your generative AI applications. Guardrails provide additional protection by filtering and monitoring content generated through Bedrock APIs. You can deactivate it by changing this parameter to `false`.