AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-06-04 · Documentation high

File: AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput.md

Summary

Added ClientSecretConfig and ClientSecretSource properties; changed ClientSecret requirement from Yes to No

Security assessment

Introduces new secret management properties (SecretReference and source specification) for client secrets, improving security documentation but without evidence of fixing a specific vulnerability.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput.md
index 75d15d8ea..014973bdd 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput.md
@@ -22,0 +23,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+      "ClientSecretConfig" : [SecretReference](./aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html),
+      "ClientSecretSource" : String,
@@ -31,0 +34,3 @@ To declare this entity in your CloudFormation template, use the following syntax
+      ClientSecretConfig: 
+        [SecretReference](./aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html)
+      ClientSecretSource: String
@@ -57 +62 @@ The client secret for the Microsoft OAuth2 provider.
-_Required_ : Yes
+_Required_ : No
@@ -66,0 +72,24 @@ _Required_ : Yes
+`ClientSecretConfig`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : [SecretReference](./aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`ClientSecretSource`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Allowed values_ : `MANAGED | EXTERNAL`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+