AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-06-04 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput.md

Summary

Added ClientSecretConfig and ClientSecretSource properties, made ClientSecret optional, and defined secret management options

Security assessment

Extends secret management capabilities (MANAGED/EXTERNAL) using SecretReference for better credential security. Documentation enhancement without vulnerability fix evidence.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput.md
index d3eddb04d..d8cb57509 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput.md
@@ -23,0 +24,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+      "ClientSecretConfig" : [SecretReference](./aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html),
+      "ClientSecretSource" : String,
@@ -34,0 +37,3 @@ To declare this entity in your CloudFormation template, use the following syntax
+      ClientSecretConfig: 
+        [SecretReference](./aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html)
+      ClientSecretSource: String
@@ -72 +77 @@ The client secret for the supported OAuth2 provider. This secret is assigned by
-_Required_ : Yes
+_Required_ : No
@@ -81,0 +87,24 @@ _Required_ : Yes
+`ClientSecretConfig`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : [SecretReference](./aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`ClientSecretSource`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Allowed values_ : `MANAGED | EXTERNAL`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+