AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-04-19 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpntargetnetworkassociation.md

Summary

Changed the 'SubnetId' property from required to optional in the Client VPN target network association.

Security assessment

This change allows more flexibility in network configuration but does not address any specific security vulnerability. It could impact security by altering default requirements, but no concrete evidence of a security issue is present.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpntargetnetworkassociation.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpntargetnetworkassociation.md
index 191e8ed6c..ccbb84915 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpntargetnetworkassociation.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpntargetnetworkassociation.md
@@ -54 +54 @@ The ID of the subnet to associate with the Client VPN endpoint.
-_Required_ : Yes
+_Required_ : No