AWS Security ChangesHomeSearch

AWS AWSCloudFormation medium security documentation change

Service: AWSCloudFormation · 2026-06-25 · Security-related medium

File: AWSCloudFormation/latest/TemplateReference/doc-history.md

Summary

Added multiple documentation history entries including new Lambda resources and Network Firewall policy actions

Security assessment

Added 'aws:drop_established_app_layer_to_server' and 'aws:alert_established_app_layer_to_server' actions for Network Firewall. These are security-focused actions that provide application-layer protection for established connections, directly enhancing traffic inspection and threat response capabilities.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md
index cd4dfeda7..1e0c6cd13 100644
--- a//AWSCloudFormation/latest/TemplateReference/doc-history.md
+++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md
@@ -12,0 +13,17 @@ Change| Description| Date
+[Updated property description](./aws-template-resource-type-ref.html)| The following resource's properties were updated: AWS::MWAA::Environment
+
+[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion)
+     The `AirflowVersion` property has been updated to include all supported values, including `3.2.1`.
+[WebserverAccessMode](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-webserveraccessmode)
+     The `WebserverAccessMode` property has been updated to include `PUBLIC_AND_PRIVATE` access mode.
+| June 22, 2026  
+[New resource](./aws-template-resource-type-ref.html)| The following resource was added: `AWS::Lambda::MicrovmImage`.
+
+[AWS::Lambda::MicrovmImage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-microvmimage.html)
+     Use the `AWS::Lambda::MicrovmImage` resource to specify a MicroVM image used by Lambda MicroVMs for customized execution environments.
+| June 22, 2026  
+[New resource](./aws-template-resource-type-ref.html)| The following resource was added: `AWS::Lambda::NetworkConnector`.
+
+[AWS::Lambda::NetworkConnector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-networkconnector.html)
+     Use the `AWS::Lambda::NetworkConnector` resource to specify a network connector used by Lambda MicroVMs to reach resources in a virtual private cloud (VPC).
+| June 22, 2026  
@@ -17,0 +35,5 @@ Change| Description| Date
+[Updated resources](./aws-template-resource-type-ref.html)| The following resource was updated: AWS::NetworkFirewall::FirewallPolicy
+
+[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html)
+     Use the `StatefulDefaultActions` property with the new actions to control established connections. The `aws:drop_established_app_layer_to_server` action drops client-to-server traffic at the application layer. The `aws:alert_established_app_layer_to_server` action generates alerts for client-to-server traffic at the application layer.
+| June 18, 2026  
@@ -29,0 +52 @@ Change| Description| Date
+[Updated property description](./aws-template-resource-type-ref.html)| Added a description for the `RuntimePolicy` property of the `AWS::Lambda::Version` resource.| May 30, 2026