AWS AWSCloudFormation documentation change
Summary
Added AppSecretConfig, AppSecretSource, AuthorizationPrivateKeyConfig, and AuthorizationPrivateKeySource properties; changed AppSecret and AuthorizationPrivateKey from required to optional
Security assessment
Introduces new properties for secure secret management (SecretReference type) and explicit source specification (MANAGED/EXTERNAL), improving security documentation but without evidence of fixing a specific vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.md index 74c164954..b267d562b 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.md @@ -22,0 +23,2 @@ To declare this entity in your CloudFormation template, use the following syntax + "AppSecretConfig" : [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html), + "AppSecretSource" : String, @@ -24 +26,3 @@ To declare this entity in your CloudFormation template, use the following syntax - "AuthorizationPrivateKey" : String + "AuthorizationPrivateKey" : String, + "AuthorizationPrivateKeyConfig" : [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html), + "AuthorizationPrivateKeySource" : String @@ -32,0 +37,3 @@ To declare this entity in your CloudFormation template, use the following syntax + AppSecretConfig: + [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html) + AppSecretSource: String @@ -34,0 +42,3 @@ To declare this entity in your CloudFormation template, use the following syntax + AuthorizationPrivateKeyConfig: + [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html) + AuthorizationPrivateKeySource: String @@ -59 +69 @@ The app secret provided by Privy. -_Required_ : Yes +_Required_ : No @@ -68,0 +79,24 @@ _Required_ : Yes +`AppSecretConfig` + + +Property description not available. + +_Required_ : No + + _Type_ : [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + +`AppSecretSource` + + +Property description not available. + +_Required_ : No + + _Type_ : String + + _Allowed values_ : `MANAGED | EXTERNAL` + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + @@ -89 +123 @@ The authorization private key for the Stripe Privy integration. -_Required_ : Yes +_Required_ : No @@ -98,0 +133,24 @@ _Required_ : Yes +`AuthorizationPrivateKeyConfig` + + +Property description not available. + +_Required_ : No + + _Type_ : [SecretReference](./aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + +`AuthorizationPrivateKeySource` + + +Property description not available. + +_Required_ : No + + _Type_ : String + + _Allowed values_ : `MANAGED | EXTERNAL` + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + @@ -105 +163 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -SecretInfo +SecretReference