AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-03-13 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-resource-odb-odbnetwork.md

Summary

Added new properties for CrossRegionS3RestoreSources, KMS access configuration (KmsAccess, KmsPolicyDocument), and STS access configuration (StsAccess, StsPolicyDocument)

Security assessment

Added documentation for KMS and STS access controls, which are security-related features for managing encryption keys and security token policies. However, there is no evidence this addresses a specific security vulnerability.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-odb-odbnetwork.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-odb-odbnetwork.md
index b6ceed365..308fbb5e3 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-odb-odbnetwork.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-odb-odbnetwork.md
@@ -24,0 +25 @@ To declare this entity in your CloudFormation template, use the following syntax
+          "CrossRegionS3RestoreSources" : [ String, ... ],
@@ -28,0 +30,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+          "KmsAccess" : [String](./aws-properties-odb-odbnetwork-kmsaccess.html),
+          "KmsPolicyDocument" : String,
@@ -30,0 +34,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+          "StsAccess" : [String](./aws-properties-odb-odbnetwork-stsaccess.html),
+          "StsPolicyDocument" : String,
@@ -45,0 +51,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+      CrossRegionS3RestoreSources: 
+        - String
@@ -49,0 +57,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+      KmsAccess: [String](./aws-properties-odb-odbnetwork-kmsaccess.html)
+      KmsPolicyDocument: String
@@ -51,0 +61,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+      StsAccess: [String](./aws-properties-odb-odbnetwork-stsaccess.html)
+      StsPolicyDocument: String
@@ -124,0 +136,11 @@ _Required_ : Conditional
+`CrossRegionS3RestoreSources`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : Array of String
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
@@ -186,0 +209,24 @@ _Minimum_ : `1`
+`KmsAccess`
+    
+
+Configuration for AWS Key Management Service (KMS) access from the ODB network.
+
+_Required_ : No
+
+ _Type_ : [String](./aws-properties-odb-odbnetwork-kmsaccess.html)
+
+ _Allowed values_ : `ENABLED | DISABLED`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`KmsPolicyDocument`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
@@ -202,0 +249,24 @@ _Required_ : No
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`StsAccess`
+    
+
+Configuration for AWS Security Token Service (STS) access from the ODB network.
+
+_Required_ : No
+
+ _Type_ : [String](./aws-properties-odb-odbnetwork-stsaccess.html)
+
+ _Allowed values_ : `ENABLED | DISABLED`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`StsPolicyDocument`
+    
+
@@ -286 +356 @@ Tag
-ManagedS3BackupAccess
+CrossRegionS3RestoreSourcesAccess