AWS AWSCloudFormation documentation change
Summary
Updated SSO instance and permission set ARN patterns to use more flexible regex pattern
Security assessment
Changed from explicit partition listing to a more flexible regex pattern (-[a-z]{1,5}){0,3}. This appears to be a pattern normalization or future-proofing change, not a security fix.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-assignment.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-sso-assignment.md index ff2bff12e..46387350c 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-assignment.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-sso-assignment.md @@ -59 +59 @@ _Required_ : Yes - _Pattern_ : `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}` + _Pattern_ : `arn:aws(-[a-z]{1,5}){0,3}:sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}` @@ -76 +76 @@ _Required_ : Yes - _Pattern_ : `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::permissionSet/(sso)?ins-[a-zA-Z0-9-.]{16}/ps-[a-zA-Z0-9-./]{16}` + _Pattern_ : `arn:aws(-[a-z]{1,5}){0,3}:sso:::permissionSet/(sso)?ins-[a-zA-Z0-9-.]{16}/ps-[a-zA-Z0-9-./]{16}`