AWS AWSCloudFormation documentation change
Summary
Updated the ARN pattern for InstanceArn property to use a more flexible regex pattern that supports additional AWS partition formats
Security assessment
The change updates a regular expression pattern for ARN validation to be more flexible, allowing for additional AWS partition formats. This appears to be a documentation correction or enhancement to support more partition naming conventions, not related to addressing any specific security vulnerability or weakness.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-instanceaccesscontrolattributeconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-instanceaccesscontrolattributeconfiguration.md index 99e70707a..79a50c319 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-instanceaccesscontrolattributeconfiguration.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-instanceaccesscontrolattributeconfiguration.md @@ -65 +65 @@ _Required_ : Yes - _Pattern_ : `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}` + _Pattern_ : `arn:aws(-[a-z]{1,5}){0,3}:sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}`