AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-03-16 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flowoutput-encryption.md

Summary

Added ARN validation patterns for RoleARN and SecretARN

Security assessment

Enhanced input validation for encryption credentials but no vulnerability addressed

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flowoutput-encryption.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flowoutput-encryption.md
index f759067a5..89401f0f6 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flowoutput-encryption.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flowoutput-encryption.md
@@ -71,0 +72,2 @@ _Required_ : Yes
+ _Pattern_ : `^arn:(aws[a-zA-Z-]*):iam::[0-9]{12}:role/[a-zA-Z0-9_+=,.@-]+$`
+
@@ -82,0 +85,2 @@ _Required_ : Yes
+ _Pattern_ : `^arn:(aws[a-zA-Z-]*):secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+$`
+