AWS Security ChangesHomeSearch

AWS serverless-application-model documentation change

Service: serverless-application-model · 2026-07-07 · Documentation low

File: serverless-application-model/latest/developerguide/sam-specification-generated-resources.md

Summary

Added documentation for two new SAM resources: MicrovmImage and NetworkConnector with IAM role generation details.

Security assessment

New resource documentation focuses on feature implementation, not security. IAM role mentions are standard permissions setup without security vulnerability context.

Diff

diff --git a/serverless-application-model/latest/developerguide/sam-specification-generated-resources.md b/serverless-application-model/latest/developerguide/sam-specification-generated-resources.md
index 8ebeebae0..4fce1af4a 100644
--- a//serverless-application-model/latest/developerguide/sam-specification-generated-resources.md
+++ b//serverless-application-model/latest/developerguide/sam-specification-generated-resources.md
@@ -58,0 +59,10 @@ AWS SAM resource | Base CloudFormation resource | Scenarios
+`[AWS::Serverless::MicrovmImage](./sam-specification-generated-resources-microvmimage.html)` | `[AWS::Lambda::MicrovmImage](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-microvmimage.html)` | 
+
+  * [BuildRoleArn property is not specified](./sam-specification-generated-resources-microvmimage.html#sam-specification-generated-resources-microvmimage-iam-role)
+
+  
+`[AWS::Serverless::NetworkConnector](./sam-specification-generated-resources-networkconnector.html)` | `[AWS::Lambda::NetworkConnector](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-networkconnector.html)` | 
+
+  * [OperatorRole property is not specified](./sam-specification-generated-resources-networkconnector.html#sam-specification-generated-resources-networkconnector-iam-role)
+
+  
@@ -113,0 +124,4 @@ AWS SAM resource | Base CloudFormation resource | Scenarios
+  * [CloudFormation resources generated when AWS::Serverless::MicrovmImage is specified](./sam-specification-generated-resources-microvmimage.html)
+
+  * [CloudFormation resources generated when AWS::Serverless::NetworkConnector is specified](./sam-specification-generated-resources-networkconnector.html)
+