AWS AWSCloudFormation documentation change
Summary
Added documentation for clientSecret and clientSecretSource properties, explaining secret storage in Secrets Manager and source types (MANAGED/EXTERNAL)
Security assessment
The update provides guidance on securely managing client secrets but doesn't address any specific vulnerability. This enhances documentation of security features.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput.md index 24f89b304..c34721334 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput.md @@ -73 +73 @@ _Required_ : No -Property description not available. +A reference to the AWS Secrets Manager secret that stores the client secret. This includes the secret ID and the JSON key used to extract the client secret value from the secret. Required when `clientSecretSource` is set to `EXTERNAL`. @@ -84 +84 @@ _Required_ : No -Property description not available. +The source type of the client secret. Use `MANAGED` if the secret is managed by the service, or `EXTERNAL` if you manage the secret yourself in AWS Secrets Manager.