AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-04-25 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-resource-neptunegraph-graph.md

Summary

Added markdown link and documentation for KmsKeyIdentifier property for encryption

Security assessment

This change adds documentation for the KmsKeyIdentifier property which allows specifying a KMS key for encrypting Neptune Graph data. This is a security feature (encryption at rest) but there's no evidence it addresses a specific security issue. The change enhances security documentation by detailing encryption options.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-neptunegraph-graph.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-neptunegraph-graph.md
index ff92bf2fc..8c6debc6d 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-neptunegraph-graph.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-neptunegraph-graph.md
@@ -0,0 +1,2 @@
+[View a markdown version of this page](aws-resource-neptunegraph-graph.md)
+
@@ -24,0 +27 @@ To declare this entity in your CloudFormation template, use the following syntax
+          "KmsKeyIdentifier" : String,
@@ -40,0 +44 @@ To declare this entity in your CloudFormation template, use the following syntax
+      KmsKeyIdentifier: String
@@ -83,0 +88,23 @@ _Minimum_ : `1`
+`KmsKeyIdentifier`
+    
+
+The ARN of the KMS key used to encrypt data in the graph.
+
+If not specified, the graph is encrypted with an AWS managed key.
+
+###### Note
+
+You cannot change the KMS key after the graph is created.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Pattern_ : `arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}`
+
+_Minimum_ : `1`
+
+ _Maximum_ : `1024`
+
+ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)
+