AWS AWSCloudFormation documentation change
Summary
Added documentation for appSecret and authorizationPrivateKey properties, including Secrets Manager references and source type explanations (MANAGED/EXTERNAL)
Security assessment
The changes clarify secure handling of sensitive keys but don't patch any vulnerability. This enhances documentation of security features for payment credentials.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.md index b267d562b..571cd4fca 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.md @@ -82 +82 @@ _Required_ : No -Property description not available. +A reference to the AWS Secrets Manager secret that stores the app secret. This includes the secret ID and the JSON key used to extract the app secret value from the secret. Required when `appSecretSource` is set to `EXTERNAL`. @@ -93 +93 @@ _Required_ : No -Property description not available. +The source type of the app secret. Use `MANAGED` if the secret is managed by the service, or `EXTERNAL` if you manage the secret yourself in AWS Secrets Manager. @@ -136 +136 @@ _Required_ : No -Property description not available. +A reference to the AWS Secrets Manager secret that stores the authorization private key. This includes the secret ID and the JSON key used to extract the authorization private key value from the secret. Required when `authorizationPrivateKeySource` is set to `EXTERNAL`. @@ -147 +147 @@ _Required_ : No -Property description not available. +The source type of the authorization private key. Use `MANAGED` if the secret is managed by the service, or `EXTERNAL` if you manage the secret yourself in AWS Secrets Manager.