AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-07-01 · Documentation low

File: AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-direct.md

Summary

Added documentation for pre-deployment validation and express mode features in CloudFormation stack updates

Security assessment

The changes document general operational features: 1) Pre-deployment validation helps prevent deployment failures but isn't security-specific 2) Express mode focuses on deployment speed. No security vulnerabilities, security controls, or security incidents are mentioned. The --disable-validation flag could potentially introduce risks if misused, but this isn't presented as a security feature.

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-direct.md b/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-direct.md
index a6dbc2957..cfe3d2a8f 100644
--- a//AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-direct.md
+++ b//AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-direct.md
@@ -14,0 +15,6 @@ When updating a stack, CloudFormation might interrupt resources or replace updat
+###### Pre-deployment validation
+
+When you perform a direct stack update, CloudFormation automatically validates your template against common failure scenarios before modifying any resources. If validation detects errors, the update stops and no resources are changed.
+
+To view validation results in the console, open the stack's **Events** tab and choose the operation ID. Then choose the **Deployment validations** tab. To view results with the AWS CLI, use the [describe-events](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/describe-events.html) command. To skip validation, use the `--disable-validation` flag in the AWS CLI or set `DisableValidation` to `true` in the API call.
+
@@ -98,0 +105,9 @@ For examples of using the command line to update a stack, see [Examples of Cloud
+###### Express mode
+
+To update a stack using express mode, add the `--deployment-config` parameter. Express mode completes the stack operation as soon as resource configuration is applied. For more information, see [Express mode](./cloudformation-express-mode.html).
+    
+    
+    aws cloudformation update-stack --stack-name myteststack \
+        --template-body file://sampletemplate.json \
+        --deployment-config '{"mode": "EXPRESS"}'
+