AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-04-04 · Documentation low

File: AWSCloudFormation/latest/TemplateReference/aws-resource-sso-applicationassignment.md

Summary

Updated ARN pattern validation for SSO ApplicationAssignment resource to use a more flexible regex pattern supporting various AWS partitions.

Security assessment

Similar to the SSO Application change, this updates ARN pattern validation for compatibility with different AWS partitions. This is a routine documentation update without security implications.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-applicationassignment.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-applicationassignment.md
index bc85df5a4..cf36c5da9 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-applicationassignment.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-applicationassignment.md
@@ -49 +49 @@ _Required_ : Yes
- _Pattern_ : `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso::\d{12}:application/(sso)?ins-[a-zA-Z0-9-.]{16}/apl-[a-zA-Z0-9]{16}`
+ _Pattern_ : `arn:aws(-[a-z]{1,5}){0,3}:sso::\d{12}:application/(sso)?ins-[a-zA-Z0-9-.]{16}/apl-[a-zA-Z0-9]{16}`