AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-04-10 · Documentation low

File: AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-encryptionconfiguration.md

Summary

Updated KMS key ARN pattern regex from {1,3} to {1,4} for region code length

Security assessment

Same change as in crossregioncopyrule.md - expanding regex pattern for KMS key ARNs to support longer region codes. This is a routine update for region support, not a security fix.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-encryptionconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-encryptionconfiguration.md
index 7362cec0d..319f826c3 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-encryptionconfiguration.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-encryptionconfiguration.md
@@ -42 +42 @@ _Required_ : No
- _Pattern_ : `arn:aws(-[a-z]{1,3}){0,2}:kms:([a-z]+-){2,3}\d:\d+:key/.*`
+ _Pattern_ : `arn:aws(-[a-z]{1,4}){0,2}:kms:([a-z]+-){2,3}\d:\d+:key/.*`