AWS AWSCloudFormation documentation change
Summary
Updated IAM role ARN pattern to include additional AWS partitions (aws-cn, aws-us-gov, aws-iso variants), identical to the browser custom resource change.
Security assessment
This change expands the validation pattern for IAM role ARNs to include additional AWS partitions but does not address any security vulnerability or weakness. It's a documentation update to reflect broader AWS partition support.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-codeinterpretercustom.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-codeinterpretercustom.md index 0709f4aad..974ab8d63 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-codeinterpretercustom.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-codeinterpretercustom.md @@ -70 +70 @@ _Required_ : No - _Pattern_ : `^arn:aws(-[a-z]+)*:iam::[0-9]{12}:role/.+$` + _Pattern_ : `^arn:(aws(?:-cn|-us-gov|-iso(?:-[bef])?)?):iam::[0-9]{12}:role/.+$`