AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-06-04 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput.md

Summary

Added ClientSecretConfig and ClientSecretSource properties, made ClientSecret optional, and defined secret management options

Security assessment

Adds secret management features (MANAGED/EXTERNAL) through SecretReference for secure credential handling. Security enhancement without vulnerability remediation evidence.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput.md
index 82d60b851..86f276347 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput.md
@@ -22 +22,3 @@ To declare this entity in your CloudFormation template, use the following syntax
-      "ClientSecret" : String
+      "ClientSecret" : String,
+      "ClientSecretConfig" : [SecretReference](./aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html),
+      "ClientSecretSource" : String
@@ -30,0 +33,3 @@ To declare this entity in your CloudFormation template, use the following syntax
+      ClientSecretConfig: 
+        [SecretReference](./aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html)
+      ClientSecretSource: String
@@ -55 +60 @@ The client secret for the GitHub OAuth2 provider.
-_Required_ : Yes
+_Required_ : No
@@ -64,0 +70,24 @@ _Required_ : Yes
+`ClientSecretConfig`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : [SecretReference](./aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`ClientSecretSource`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Allowed values_ : `MANAGED | EXTERNAL`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+