AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-04-07 · Documentation low

File: AWSCloudFormation/latest/TemplateReference/aws-resource-sso-permissionset.md

Summary

Updated the ARN pattern for InstanceArn property to use a more flexible regex pattern that supports additional AWS partition formats

Security assessment

This change mirrors the same pattern update as in the first file, modifying the ARN validation regex to be more permissive for AWS partition naming. There is no evidence this addresses a security issue; it appears to be a documentation update for consistency and broader partition support.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-permissionset.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-permissionset.md
index 23d03c943..052eeeef1 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-permissionset.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-permissionset.md
@@ -118 +118 @@ _Required_ : Yes
- _Pattern_ : `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}`
+ _Pattern_ : `arn:aws(-[a-z]{1,5}){0,3}:sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}`