AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-05-07 · Documentation low

File: AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-groupprofile.md

Summary

Added GroupType and RolePrincipalArn properties, changed GroupId requirement from Yes to No, and added RolePrincipalId return value

Security assessment

The change adds IAM role principal association (RolePrincipalArn) and group type classification, which enhances access control documentation but doesn't fix any specific vulnerability. Security relevance comes from documenting role-based access mechanisms.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-groupprofile.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-groupprofile.md
index 88b98751a..ae039eaa8 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-groupprofile.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-groupprofile.md
@@ -24,0 +25,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+          "GroupType" : String,
+          "RolePrincipalArn" : String,
@@ -36,0 +39,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+      GroupType: String
+      RolePrincipalArn: String
@@ -60 +64 @@ The ID of the group of a project member.
-_Required_ : Yes
+_Required_ : No
@@ -67,0 +72,24 @@ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/
+`GroupType`
+    
+
+The group type for which to search.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Allowed values_ : `DATAZONE_SSO_GROUP | IAM_ROLE_SESSION_GROUP`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`RolePrincipalArn`
+    
+
+The ARN of the IAM role principal. This role is associated with the group profile.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)
+
@@ -111,0 +140,5 @@ The ID of a group profile.
+`RolePrincipalId`
+    
+
+The unique identifier of the IAM role principal. This principal is associated with the group profile.
+