AWS AWSCloudFormation medium security documentation change
Summary
Added McpRoleArn property with IAM ARN pattern validation and changed an existing property requirement from required to optional
Security assessment
Added IAM role ARN property with strict pattern validation (^arn:aws:iam::\d{12}:role/[a-zA-Z0-9+=,.@_/-]+$) which enforces secure IAM resource naming. Changing requirement to optional may impact access control configurations.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-devopsagent-service-mcpserversigv4authorizationconfig.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-devopsagent-service-mcpserversigv4authorizationconfig.md index 913c7660c..403870da7 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-devopsagent-service-mcpserversigv4authorizationconfig.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-devopsagent-service-mcpserversigv4authorizationconfig.md @@ -21,0 +22 @@ To declare this entity in your CloudFormation template, use the following syntax + "McpRoleArn" : String, @@ -32,0 +34 @@ To declare this entity in your CloudFormation template, use the following syntax + McpRoleArn: String @@ -52,0 +55,13 @@ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormat +`McpRoleArn` + + +Property description not available. + +_Required_ : No + + _Type_ : String + + _Pattern_ : `^arn:aws:iam::\d{12}:role/[a-zA-Z0-9+=,.@_/-]+$` + +_Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + @@ -71 +86 @@ Property description not available. -_Required_ : Yes +_Required_ : No