AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-06-04 · Documentation high

File: AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.md

Summary

Added ApiKeySecretConfig, ApiKeySecretSource, WalletSecretConfig, and WalletSecretSource properties; changed WalletSecret requirement from Yes to No

Security assessment

Expands secret management for API keys and wallet secrets using SecretReference and source specification, documenting enhanced security controls but not linked to a specific security incident.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.md
index 4de4c0da8..ff63126bb 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.md
@@ -23 +23,5 @@ To declare this entity in your CloudFormation template, use the following syntax
-      "WalletSecret" : String
+      "ApiKeySecretConfig" : [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html),
+      "ApiKeySecretSource" : String,
+      "WalletSecret" : String,
+      "WalletSecretConfig" : [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html),
+      "WalletSecretSource" : String
@@ -31,0 +36,3 @@ To declare this entity in your CloudFormation template, use the following syntax
+      ApiKeySecretConfig: 
+        [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html)
+      ApiKeySecretSource: String
@@ -32,0 +40,3 @@ To declare this entity in your CloudFormation template, use the following syntax
+      WalletSecretConfig: 
+        [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html)
+      WalletSecretSource: String
@@ -57 +67 @@ The Coinbase CDP API key secret. The value is stored as a secret in AWS Secrets
-_Required_ : Yes
+_Required_ : No
@@ -66,0 +77,24 @@ _Required_ : Yes
+`ApiKeySecretConfig`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`ApiKeySecretSource`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Allowed values_ : `MANAGED | EXTERNAL`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
@@ -81,0 +116,24 @@ _Required_ : No
+`WalletSecretConfig`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`WalletSecretSource`
+    
+
+Property description not available.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Allowed values_ : `MANAGED | EXTERNAL`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+