AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-03-07 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/doc-history.md

Summary

Added documentation for new BedrockAgentCore resources (PolicyEngine, Policy, Evaluator, OnlineEvaluationConfig)

Security assessment

Policy-related resources suggest authorization capabilities, but change lacks explicit security context or vulnerability references

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md
index f98b2cd53..735cf3db8 100644
--- a//AWSCloudFormation/latest/TemplateReference/doc-history.md
+++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md
@@ -10,0 +11,14 @@ Change| Description| Date
+[New resources](./aws-template-resource-type-ref.html)| The following resources were added: `AWS::BedrockAgentCore::PolicyEngine` and `AWS::BedrockAgentCore::Policy`.
+
+[AWS::BedrockAgentCore::PolicyEngine](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-policyengine.html)
+     Use the `AWS::BedrockAgentCore::PolicyEngine` resource to specify a policy engine for Amazon Bedrock AgentCore.
+[AWS::BedrockAgentCore::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-policy.html)
+     Use the `AWS::BedrockAgentCore::Policy` resource to specify a Cedar authorization policy within an Amazon Bedrock AgentCore policy engine.
+| March 3, 2026  
+[New resources](./aws-template-resource-type-ref.html)| The following resources were added: `AWS::BedrockAgentCore::Evaluator` and `AWS::BedrockAgentCore::OnlineEvaluationConfig`.
+
+[AWS::BedrockAgentCore::Evaluator](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-evaluator.html)
+     Use the `AWS::BedrockAgentCore::Evaluator` resource to specify an evaluator for Amazon Bedrock AgentCore.
+[AWS::BedrockAgentCore::OnlineEvaluationConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-onlineevaluationconfig.html)
+     Use the `AWS::BedrockAgentCore::OnlineEvaluationConfig` resource to specify an online evaluation configuration for Amazon Bedrock AgentCore.
+| February 27, 2026