AWS AWSCloudFormation documentation change
Summary
Added new resource updates for NetworkFirewall, CloudFront, and MediaConnect; updated multiple MediaConnect resource links; removed AWS::SimSpaceWeaver::Simulation entry.
Security assessment
The change documents new security features in AWS Network Firewall (StatefulDefaultActions with drop/alert actions and TLS session holding) but doesn't address a specific vulnerability. It enhances security documentation without evidence of patching a security issue.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md index 31f4b41b5..26c3060c0 100644 --- a//AWSCloudFormation/latest/TemplateReference/doc-history.md +++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md @@ -12,0 +13,19 @@ Change| Description| Date +[Updated resources](./aws-template-resource-type-ref.html)| The following resources were updated: AWS::NetworkFirewall::FirewallPolicy and AWS::NetworkFirewall::RuleGroup + +[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html) + Use the `StatefulDefaultActions` property with the new `aws:drop_established_app_layer` and `aws:alert_established_app_layer` actions to apply default actions at the application layer for established connections. Use the `EnableTLSSessionHolding` property to prevent TCP and TLS packets from reaching destination servers until TLS Inspection has evaluated Server Name Indication (SNI) rules. +[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-rulegroup.html) + Updated the `StatefulRule$Action` property documentation and updated Suricata documentation links to version 7.0.8. +| April 29, 2026 +[Updated resource](./aws-template-resource-type-ref.html)| The following resource was updated: AWS::CloudFront::Distribution + +[AWS::CloudFront::Distribution CacheTagConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-cloudfront-distribution-cachetagconfig.html) + Added `CacheTagConfig` to `DistributionConfig`. Use `CacheTagConfig` to specify the HTTP header name from which CloudFront extracts cache tags from origin responses. You can then invalidate cached objects by tag using the `CreateInvalidation` API. For more information, see [Invalidating files to remove content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Invalidation.html) in the _Amazon CloudFront Developer Guide_. +| April 24, 2026 +[Updated resources](./aws-template-resource-type-ref.html)| The following resources were updated: `AWS::MediaConnect::Flow`, `AWS::MediaConnect::RouterInput`. + +[AWS::MediaConnect::Flow](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-flow.html) + Use the `NdiSourceSettings` property to specify the NDI source settings for a flow, including the name of the upstream NDI sender. Use the `EncodingConfig` property to specify the encoding configuration for transcoding an NDI source to a transport stream. +[AWS::MediaConnect::RouterInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-routerinput.html) + Use the `MediaLiveChannel` property in the router input configuration to connect a router input to an MediaLive channel output. +| April 23, 2026 @@ -268 +287 @@ Change| Description| Date -[AWS::MediaConnect::RouterInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-routerinput.html) +[AWS::MediaConnect::RouterInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-routerinput.html) @@ -270 +289 @@ Change| Description| Date -[AWS::MediaConnect::RouterOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-routeroutput.html) +[AWS::MediaConnect::RouterOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-routeroutput.html) @@ -272 +291 @@ Change| Description| Date -[AWS::MediaConnect::RouterNetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-routernetworkinterface.html) +[AWS::MediaConnect::RouterNetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-routernetworkinterface.html) @@ -2970 +2989 @@ The following resources were added: AWS::AppSync::ChannelNamespace -[AWS::MediaConnect::Bridge](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-bridge.html) +[AWS::MediaConnect::Bridge](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-bridge.html) @@ -2972 +2991 @@ The following resources were added: AWS::AppSync::ChannelNamespace -[AWS::MediaConnect::BridgeOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-bridgeoutput.html) +[AWS::MediaConnect::BridgeOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-bridgeoutput.html) @@ -2974 +2993 @@ The following resources were added: AWS::AppSync::ChannelNamespace -[AWS::MediaConnect::BridgeSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-bridgesource.html) +[AWS::MediaConnect::BridgeSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-bridgesource.html) @@ -2976 +2995 @@ The following resources were added: AWS::AppSync::ChannelNamespace -[AWS::MediaConnect::Gateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-gateway.html) +[AWS::MediaConnect::Gateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-gateway.html) @@ -3540,5 +3558,0 @@ The following resources were added: AWS::AppSync::SourceApiAssociation -[New resource](./aws-template-resource-type-ref.html)| The following resource was added: AWS::SimSpaceWeaver::Simulation. - -[AWS::SimSpaceWeaver::Simulation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-simspaceweaver-simulation.html) - Use the `AWS::SimSpaceWeaver::Simulation` resource to specify a simulation in the AWS Cloud, in your AWS account. -| February 2, 2023 @@ -5247 +5261 @@ TagMap -[AWS::MediaConnect::Flow Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html) +[AWS::MediaConnect::Flow Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flow-source.html) @@ -5249 +5263 @@ TagMap -[AWS::MediaConnect::FlowOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowoutput.html) +[AWS::MediaConnect::FlowOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-flowoutput.html) @@ -6434 +6448 @@ TagMap -[AWS::MediaConnect::FlowVpcInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowvpcinterface.html) +[AWS::MediaConnect::FlowVpcInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-flowvpcinterface.html) @@ -6519 +6533 @@ TagMap -[AWS::MediaConnect::Flow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flow.html) +[AWS::MediaConnect::Flow](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-flow.html) @@ -6521 +6535 @@ TagMap -[AWS::MediaConnect::FlowEntitlement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowentitlement.html) +[AWS::MediaConnect::FlowEntitlement](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-flowentitlement.html) @@ -6523 +6537 @@ TagMap -[AWS::MediaConnect::FlowOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowoutput.html) +[AWS::MediaConnect::FlowOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-flowoutput.html) @@ -6525 +6539 @@ TagMap -[AWS::MediaConnect::FlowSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowsource.html) +[AWS::MediaConnect::FlowSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-flowsource.html) @@ -6527 +6541 @@ TagMap -[AWS::MediaConnect::FlowVpcInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowvpcinterface.html) +[AWS::MediaConnect::FlowVpcInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconnect-flowvpcinterface.html)