AWS AWSCloudFormation documentation change
Summary
Updated ARN pattern validation for SSO Application resource properties to use a more flexible regex pattern supporting various AWS partitions.
Security assessment
This change updates ARN pattern validation to support multiple AWS partitions (aws, aws-us-gov, aws-cn, etc.) with a more flexible regex. This is a routine documentation update for compatibility with different AWS regions/partitions, not related to security issues or security features.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-application.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-application.md index d57b6e8e1..f0d062d61 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-application.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-application.md @@ -63 +63 @@ _Required_ : Yes - _Pattern_ : `^arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso::aws:applicationProvider/[a-zA-Z0-9-/]+$` + _Pattern_ : `^arn:aws(-[a-z]{1,5}){0,3}:sso::aws:applicationProvider/[a-zA-Z0-9-/]+$` @@ -95 +95 @@ _Required_ : Yes - _Pattern_ : `^arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}$` + _Pattern_ : `^arn:aws(-[a-z]{1,5}){0,3}:sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}$`