AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-04-22 · Documentation low

File: AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.md

Summary

Added multiple new AWS resource types to the supported resources table for import, drift detection, and IaC generator capabilities, and removed two existing resources.

Security assessment

The change is a routine update to the list of supported CloudFormation resources. It adds new services (including some with security-related names like `AWS::SecurityAgent::*` and `AWS::Bedrock::ResourcePolicy`) but this is a feature expansion, not a response to a specific security vulnerability. The removal of two resources appears to be a cleanup or deprecation.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.md b/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.md
index 4b3df7b84..1cfea3cf7 100644
--- a//AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.md
+++ b//AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.md
@@ -116,0 +117 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::AppStream::Stack`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-stack.html) |  Yes |  Yes |  No  
@@ -163,0 +165 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::Batch::QuotaShare`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-quotashare.html) |  Yes |  Yes |  No  
@@ -165,0 +168 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::BcmPricingCalculator::BillScenario`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bcmpricingcalculator-billscenario.html) |  Yes |  Yes |  No  
@@ -171,0 +175 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::Bedrock::DataAutomationLibrary`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrock-dataautomationlibrary.html) |  Yes |  Yes |  No  
@@ -173,0 +178 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::Bedrock::EnforcedGuardrailConfiguration`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrock-enforcedguardrailconfiguration.html) |  Yes |  Yes |  No  
@@ -182,0 +188,2 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::Bedrock::ResourcePolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrock-resourcepolicy.html) |  Yes |  Yes |  No  
+[`AWS::BedrockAgentCore::ApiKeyCredentialProvider`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-apikeycredentialprovider.html) |  Yes |  Yes |  No  
@@ -189,0 +197 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::BedrockAgentCore::OAuth2CredentialProvider`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-oauth2credentialprovider.html) |  Yes |  Yes |  No  
@@ -201,0 +210 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::Braket::SpendingLimit`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-braket-spendinglimit.html) |  Yes |  Yes |  No  
@@ -359,0 +369 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::CustomerProfiles::Recommender`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-customerprofiles-recommender.html) |  Yes |  Yes |  No  
@@ -500,0 +511 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::EC2::SqlHaStandbyDetectedInstance`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-sqlhastandbydetectedinstance.html) |  Yes |  Yes |  No  
@@ -558,0 +570,2 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::ECS::Daemon`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-daemon.html) |  Yes |  Yes |  No  
+[`AWS::ECS::DaemonTaskDefinition`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-daemontaskdefinition.html) |  Yes |  Yes |  No  
@@ -596 +608,0 @@ Resource | Import | Drift detection | IaC generator
-[`AWS::ElasticLoadBalancing::LoadBalancer`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancing-loadbalancer.html) |  Yes |  Yes |  No  
@@ -733,0 +746 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::Interconnect::Connection`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-interconnect-connection.html) |  Yes |  Yes |  No  
@@ -953,0 +967 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::NeptuneGraph::GraphSnapshot`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptunegraph-graphsnapshot.html) |  Yes |  Yes |  No  
@@ -984,0 +999 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::NovaAct::WorkflowDefinition`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-novaact-workflowdefinition.html) |  Yes |  Yes |  No  
@@ -999,0 +1015 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::Omics::Configuration`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-omics-configuration.html) |  Yes |  Yes |  No  
@@ -1163,0 +1180,4 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::S3Files::AccessPoint`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3files-accesspoint.html) |  Yes |  Yes |  No  
+[`AWS::S3Files::FileSystem`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3files-filesystem.html) |  Yes |  Yes |  No  
+[`AWS::S3Files::FileSystemPolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3files-filesystempolicy.html) |  Yes |  Yes |  No  
+[`AWS::S3Files::MountTarget`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3files-mounttarget.html) |  Yes |  Yes |  No  
@@ -1244,0 +1265 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::SageMaker::Model`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-model.html) |  Yes |  Yes |  No  
@@ -1264,0 +1286,4 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::SecurityAgent::AgentSpace`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityagent-agentspace.html) |  Yes |  Yes |  No  
+[`AWS::SecurityAgent::Application`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityagent-application.html) |  Yes |  Yes |  No  
+[`AWS::SecurityAgent::Pentest`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityagent-pentest.html) |  Yes |  Yes |  No  
+[`AWS::SecurityAgent::TargetDomain`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityagent-targetdomain.html) |  Yes |  Yes |  No  
@@ -1302 +1326,0 @@ Resource | Import | Drift detection | IaC generator
-[`AWS::ServiceDiscovery::Service`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-service.html) |  Yes |  Yes |  No  
@@ -1332,0 +1357 @@ Resource | Import | Drift detection | IaC generator
+[`AWS::UXC::AccountCustomization`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-uxc-accountcustomization.html) |  Yes |  Yes |  No