AWS AWSCloudFormation medium security documentation change

Service: AWSCloudFormation · 2026-03-07 · Security-related medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-datasync-locationfsxontap-smb.md

Summary

Added documentation for CmkSecretConfig, CustomSecretConfig, and ManagedSecretConfig properties. Changed password requirement from Required: Yes to No.

Security assessment

The addition of secret management configurations (CmkSecretConfig, CustomSecretConfig, ManagedSecretConfig) directly relates to security features for handling encryption keys and secrets. Changing password requirement to optional could reduce security posture if misconfigured, though no explicit vulnerability is mentioned.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-datasync-locationfsxontap-smb.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-datasync-locationfsxontap-smb.md
index fa8bdd87c..e5031cf18 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-datasync-locationfsxontap-smb.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-datasync-locationfsxontap-smb.md
@@ -18,0 +19,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+      "CmkSecretConfig" : [CmkSecretConfig](./aws-properties-datasync-locationfsxontap-cmksecretconfig.html),
+      "CustomSecretConfig" : [CustomSecretConfig](./aws-properties-datasync-locationfsxontap-customsecretconfig.html),
@@ -19,0 +22 @@ To declare this entity in your CloudFormation template, use the following syntax
+      "ManagedSecretConfig" : [ManagedSecretConfig](./aws-properties-datasync-locationfsxontap-managedsecretconfig.html),
@@ -28,0 +32,4 @@ To declare this entity in your CloudFormation template, use the following syntax
+      CmkSecretConfig: 
+        [CmkSecretConfig](./aws-properties-datasync-locationfsxontap-cmksecretconfig.html)
+      CustomSecretConfig: 
+        [CustomSecretConfig](./aws-properties-datasync-locationfsxontap-customsecretconfig.html)
@@ -29,0 +37,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+      ManagedSecretConfig: 
+        [ManagedSecretConfig](./aws-properties-datasync-locationfsxontap-managedsecretconfig.html)
@@ -37,0 +47,22 @@ To declare this entity in your CloudFormation template, use the following syntax
+`CmkSecretConfig`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : [CmkSecretConfig](./aws-properties-datasync-locationfsxontap-cmksecretconfig.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`CustomSecretConfig`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : [CustomSecretConfig](./aws-properties-datasync-locationfsxontap-customsecretconfig.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
@@ -56,0 +88,11 @@ _Maximum_ : `253`
+`ManagedSecretConfig`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : [ManagedSecretConfig](./aws-properties-datasync-locationfsxontap-managedsecretconfig.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
@@ -73 +115 @@ Specifies the password of a user who has permission to access your SVM.
-_Required_ : Yes
+_Required_ : No