AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-04-10 · Documentation low

File: AWSCloudFormation/latest/TemplateReference/aws-resource-dlm-lifecyclepolicy.md

Summary

Updated IAM role ARN pattern regex from {1,3} to {1,4} for region code length

Security assessment

Expands regex pattern for IAM role ARNs to support longer region codes (up to 4 characters). This is consistent with other similar changes and appears to be routine region support updates.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-dlm-lifecyclepolicy.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-dlm-lifecyclepolicy.md
index 1e25c8359..6581b8d0b 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-dlm-lifecyclepolicy.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-dlm-lifecyclepolicy.md
@@ -164 +164 @@ _Required_ : Conditional
- _Pattern_ : `arn:aws(-[a-z]{1,3}){0,2}:iam::\d+:role/.*`
+ _Pattern_ : `arn:aws(-[a-z]{1,4}){0,2}:iam::\d+:role/.*`