AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-02-28 · Documentation low

File: AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-codeinterpretercustom.md

Summary

Enhanced documentation for code interpreter IAM roles and failure states

Security assessment

Clarifies IAM role permissions but lacks evidence of addressing a specific security vulnerability

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-codeinterpretercustom.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-codeinterpretercustom.md
index 1c99a7dce..42d2237e8 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-codeinterpretercustom.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-codeinterpretercustom.md
@@ -53 +53 @@ To declare this entity in your CloudFormation template, use the following syntax
-The code interpreter description.
+The description of the code interpreter.
@@ -64 +64 @@ _Required_ : No
-The Amazon Resource Name (ARN) of the execution role.
+The IAM role ARN that provides permissions for the code interpreter.
@@ -99 +99 @@ _Required_ : Yes
-The tags for the code interpreter.
+A map of tag keys and values to assign to the browser. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.
@@ -133 +133 @@ The code interpreter Amazon Resource Name (ARN).
-The ID of the code interpreter.
+The unique identifier of the created code interpreter.
@@ -138 +138 @@ The ID of the code interpreter.
-The time at which the code interpreter was created.
+The timestamp when the code interpreter was created.
@@ -143 +143 @@ The time at which the code interpreter was created.
-Property description not available.
+The reason for failure if the code interpreter is in a failed state.