AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-02-28 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-gatewaytarget-oauthcredentialprovider.md

Summary

Expanded OAuth documentation including credential types, redirect URLs, and scopes

Security assessment

Adds detailed OAuth configuration documentation but no vulnerability remediation. Improves security feature documentation quality.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-gatewaytarget-oauthcredentialprovider.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-gatewaytarget-oauthcredentialprovider.md
index 332064c06..15137c6a2 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-gatewaytarget-oauthcredentialprovider.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-gatewaytarget-oauthcredentialprovider.md
@@ -9 +9 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo
-The OAuth credential provider for the gateway target.
+An OAuth credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint using OAuth.
@@ -44 +44 @@ To declare this entity in your CloudFormation template, use the following syntax
-The OAuth credential provider.
+The custom parameters for the OAuth credential provider. These parameters provide additional configuration for the OAuth authentication process.
@@ -61 +61 @@ _Minimum_ : `1`
-Property description not available.
+The URL where the end user's browser is redirected after obtaining the authorization code. Generally points to the customer's application.
@@ -78 +78,8 @@ _Minimum_ : `1`
-Property description not available.
+Specifies the kind of credentials to use for authorization:
+
+  * `CLIENT_CREDENTIALS` \- Authorization with a client ID and secret.
+
+  * `AUTHORIZATION_CODE` \- Authorization with a token that is specific to an individual end user.
+
+
+
@@ -91 +98 @@ _Required_ : No
-The provider ARN for the gateway target.
+The Amazon Resource Name (ARN) of the OAuth credential provider. This ARN identifies the provider in AWS.
@@ -104 +111 @@ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormat
-The OAuth credential provider scopes.
+The OAuth scopes for the credential provider. These scopes define the level of access requested from the OAuth provider.