AWS AWSCloudFormation documentation change
Summary
Updated ARN pattern validation for KMS key and IAM role properties to use a more generic partition regex (`[a-z0-9-]{1,20}`) instead of hardcoded AWS partitions.
Security assessment
This is a routine update to support additional AWS partitions (like AWS GovCloud, China). It does not indicate a security fix; it's a feature expansion for broader compatibility.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-gateway.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-gateway.md index 469ef6d7d..cf0695826 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-gateway.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-gateway.md @@ -143 +143 @@ _Required_ : No - _Pattern_ : `^arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}$` + _Pattern_ : `^arn:[a-z0-9-]{1,20}:kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}$` @@ -208 +208 @@ _Required_ : Yes - _Pattern_ : `^arn:aws(-[^:]+)?:iam::([0-9]{12})?:role/.+$` + _Pattern_ : `^arn:[a-z0-9-]{1,20}:iam::([0-9]{12})?:role/.+$`