AWS AWSCloudFormation documentation change
Summary
Enhanced resource documentation including security note about encrypted API key storage and added attribute reference section
Security assessment
Explicitly mentions that API keys are encrypted and stored securely, documenting a security feature. No evidence this addresses a specific vulnerability, but it highlights existing security controls.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-apikeycredentialprovider.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-apikeycredentialprovider.md index de8a318b6..846141028 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-apikeycredentialprovider.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-apikeycredentialprovider.md @@ -11 +11,3 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -Creates a new API key credential provider. +Specifies an API key credential provider for Amazon Bedrock AgentCore. An API key credential provider stores and manages API keys that agents use to authenticate with external services and third-party APIs through AgentCore Gateway. + +See the **Properties** section below for descriptions of both the required and optional properties. @@ -51 +53 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The API key to use for authentication. This value is encrypted and stored securely. @@ -107 +109 @@ _Minimum_ : `1` -Property description not available. +A map of tag keys and values to assign to the API key credential provider. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment. @@ -122,0 +125,4 @@ _Required_ : No +The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values. + +For more information about using the `Fn::GetAtt` intrinsic function, see [`Fn::GetAtt`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html). +