AWS AWSCloudFormation medium security documentation change
Summary
Added multiple documentation history entries including new Lambda resources and Network Firewall policy actions
Security assessment
Added 'aws:drop_established_app_layer_to_server' and 'aws:alert_established_app_layer_to_server' actions for Network Firewall. These are security-focused actions that provide application-layer protection for established connections, directly enhancing traffic inspection and threat response capabilities.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md index cd4dfeda7..1e0c6cd13 100644 --- a//AWSCloudFormation/latest/TemplateReference/doc-history.md +++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md @@ -12,0 +13,17 @@ Change| Description| Date +[Updated property description](./aws-template-resource-type-ref.html)| The following resource's properties were updated: AWS::MWAA::Environment + +[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion) + The `AirflowVersion` property has been updated to include all supported values, including `3.2.1`. +[WebserverAccessMode](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-webserveraccessmode) + The `WebserverAccessMode` property has been updated to include `PUBLIC_AND_PRIVATE` access mode. +| June 22, 2026 +[New resource](./aws-template-resource-type-ref.html)| The following resource was added: `AWS::Lambda::MicrovmImage`. + +[AWS::Lambda::MicrovmImage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-microvmimage.html) + Use the `AWS::Lambda::MicrovmImage` resource to specify a MicroVM image used by Lambda MicroVMs for customized execution environments. +| June 22, 2026 +[New resource](./aws-template-resource-type-ref.html)| The following resource was added: `AWS::Lambda::NetworkConnector`. + +[AWS::Lambda::NetworkConnector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-networkconnector.html) + Use the `AWS::Lambda::NetworkConnector` resource to specify a network connector used by Lambda MicroVMs to reach resources in a virtual private cloud (VPC). +| June 22, 2026 @@ -17,0 +35,5 @@ Change| Description| Date +[Updated resources](./aws-template-resource-type-ref.html)| The following resource was updated: AWS::NetworkFirewall::FirewallPolicy + +[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html) + Use the `StatefulDefaultActions` property with the new actions to control established connections. The `aws:drop_established_app_layer_to_server` action drops client-to-server traffic at the application layer. The `aws:alert_established_app_layer_to_server` action generates alerts for client-to-server traffic at the application layer. +| June 18, 2026 @@ -29,0 +52 @@ Change| Description| Date +[Updated property description](./aws-template-resource-type-ref.html)| Added a description for the `RuntimePolicy` property of the `AWS::Lambda::Version` resource.| May 30, 2026