AWS AWSCloudFormation documentation change
Summary
Updated KMS key ARN pattern regex from {1,3} to {1,4} for region code length
Security assessment
This change expands the regex pattern for KMS key ARNs to support longer region codes (up to 4 characters instead of 3). This appears to be a routine update to support new AWS regions or partitions, not a security fix. No evidence of security vulnerability being addressed.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-crossregioncopyrule.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-crossregioncopyrule.md index 3119faad7..24b50967b 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-crossregioncopyrule.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-crossregioncopyrule.md @@ -58 +58 @@ _Required_ : No - _Pattern_ : `arn:aws(-[a-z]{1,3}){0,2}:kms:([a-z]+-){2,3}\d:\d+:key/.*` + _Pattern_ : `arn:aws(-[a-z]{1,4}){0,2}:kms:([a-z]+-){2,3}\d:\d+:key/.*`