AWS AWSCloudFormation documentation change
Summary
Enhanced memory resource documentation with explicit references to KMS encryption, IAM roles, memory strategies, and failure states.
Security assessment
Adds documentation about security features including KMS encryption ('ARN of the KMS key used to encrypt') and IAM role permissions. While these clarify security controls, there's no evidence these changes address a specific vulnerability or security incident.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-memory.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-memory.md index 6cb61d62f..1c2f15b85 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-memory.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-memory.md @@ -57 +57 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The description of the memory. @@ -68 +68 @@ _Required_ : No -The memory encryption key Amazon Resource Name (ARN). +The ARN of the KMS key used to encrypt the memory. @@ -81 +81 @@ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/ -The event expiry configuration. +The number of days after which memory events will expire. @@ -96 +96 @@ _Required_ : Yes -The memory role ARN. +The ARN of the IAM role that provides permissions for the memory. @@ -109 +109 @@ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormat -The memory strategies. +The list of memory strategies associated with this memory. @@ -120 +120 @@ _Required_ : No -The memory name. +The name of the memory. @@ -133 +133 @@ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/ -The tags for the resources. +A map of tag keys and values to assign to an AgentCore Memory. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment. @@ -152,0 +153,4 @@ _Minimum_ : `0` +The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values. + +For more information about using the `Fn::GetAtt` intrinsic function, see [`Fn::GetAtt`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html). + @@ -158 +162 @@ _Minimum_ : `0` -The timestamp when the memory record was created. +The timestamp when the memory was created. @@ -163 +167 @@ The timestamp when the memory record was created. -Property description not available. +The reason for failure if the memory is in a failed state. @@ -168 +172 @@ Property description not available. -Property description not available. +The Amazon Resource Name (ARN) of the memory. @@ -173 +177 @@ Property description not available. -The memory ID. +The unique identifier of the memory. @@ -178 +182 @@ The memory ID. -The memory status. +The current status of the memory. @@ -183 +187 @@ The memory status. -Property description not available. +The timestamp when the memory was last updated.