AWS AWSCloudFormation documentation change
Summary
Added 'PartnerThreatProtection' configuration for third-party threat feeds via AWS Marketplace
Security assessment
Documents integration with third-party threat intelligence feeds (security feature), but no evidence of addressing specific vulnerabilities. Highlights subscription requirements that affect rule enforcement.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-route53resolver-firewallrulegroup-firewallruletype.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-route53resolver-firewallrulegroup-firewallruletype.md index 5b183ede8..335d35412 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-route53resolver-firewallrulegroup-firewallruletype.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-route53resolver-firewallrulegroup-firewallruletype.md @@ -24 +24,2 @@ To declare this entity in your CloudFormation template, use the following syntax - "FirewallAdvancedThreatCategory" : [FirewallAdvancedThreatCategoryConfig](./aws-properties-route53resolver-firewallrulegroup-firewalladvancedthreatcategoryconfig.html) + "FirewallAdvancedThreatCategory" : [FirewallAdvancedThreatCategoryConfig](./aws-properties-route53resolver-firewallrulegroup-firewalladvancedthreatcategoryconfig.html), + "PartnerThreatProtection" : [PartnerThreatProtectionConfig](./aws-properties-route53resolver-firewallrulegroup-partnerthreatprotectionconfig.html) @@ -34,0 +36,2 @@ To declare this entity in your CloudFormation template, use the following syntax + PartnerThreatProtection: + [PartnerThreatProtectionConfig](./aws-properties-route53resolver-firewallrulegroup-partnerthreatprotectionconfig.html) @@ -60,0 +64,11 @@ _Required_ : No +`PartnerThreatProtection` + + +Configures the rule to match a third-party threat feed delivered through AWS Marketplace. The calling account must hold an active subscription to the partner product named in `Partner`; if the subscription is missing or revoked, the rule is created with `Status``CREATION_FAILED` and cannot be modified — only deleted. See PartnerThreatProtectionConfig. + +_Required_ : No + + _Type_ : [PartnerThreatProtectionConfig](./aws-properties-route53resolver-firewallrulegroup-partnerthreatprotectionconfig.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + @@ -69 +83 @@ FirewallRule -Tag +PartnerThreatProtectionConfig