AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-07-01 · Documentation low

File: AWSCloudFormation/latest/TemplateReference/aws-resource-ecr-pullthroughcacherule.md

Summary

Updated ARN pattern validation for CredentialArn property to support additional partition names beyond 'aws'.

Security assessment

Pattern change only expands valid ARN formats (e.g., supports aws-cn, aws-us-gov partitions). No security vulnerability or weakness is addressed. This is a compatibility improvement without security implications.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-ecr-pullthroughcacherule.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-ecr-pullthroughcacherule.md
index f24855dea..caa4509fd 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-ecr-pullthroughcacherule.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-ecr-pullthroughcacherule.md
@@ -57 +57 @@ _Required_ : No
- _Pattern_ : `^arn:aws:secretsmanager:[a-zA-Z0-9-:]+:secret:ecr\-pullthroughcache\/[a-zA-Z0-9\/_+=.@-]+$`
+ _Pattern_ : `^arn:[a-zA-Z-]+:secretsmanager:[a-zA-Z0-9-:]+:secret:ecr\-pullthroughcache\/[a-zA-Z0-9\/_+=.@-]+$`