AWS AWSCloudFormation documentation change
Summary
Added documentation for policy grant resource including authorization policy configuration details
Security assessment
The changes document authorization policies (grants) which are security controls, but simply describe existing functionality rather than addressing a vulnerability. Clarifies security-relevant resource permissions without evidence of security issue remediation.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-policygrant.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-policygrant.md index af7aaa68c..3f43fce76 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-policygrant.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-policygrant.md @@ -9 +9 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `AWS::DataZone::PolicyGrant` resource Property description not available. for DataZone. +Adds a policy grant (an authorization policy) to a specified entity, including domain units, environment blueprint configurations, or environment profiles. @@ -62 +62 @@ _Required_ : No -Property description not available. +The ID of the domain where you want to add a policy grant. @@ -75 +75 @@ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/ -Property description not available. +The ID of the entity (resource) to which you want to add a policy grant. @@ -86 +86 @@ _Required_ : Yes -Property description not available. +The type of entity (resource) to which the grant is added. @@ -99 +99 @@ _Required_ : Yes -Property description not available. +The type of policy that you want to grant.