AWS AWSCloudFormation documentation change
Summary
Added KMS key ARN documentation for encrypting durable function payloads
Security assessment
Documents encryption capability for sensitive data (input/output/error payloads) using KMS, enhancing security posture but not fixing a specific vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-function-durableconfig.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-function-durableconfig.md index 4a2122096..9e5d470f8 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-function-durableconfig.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-function-durableconfig.md @@ -11 +11 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html), including execution timeout and retention period for execution history. +Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html), including execution timeout, retention period for execution history, and an optional ARN of the AWS Key Management Service (AWS KMS) customer managed key that is used to encrypt your durable execution's payload data, including input, output, and error payloads. @@ -55 +55 @@ _Required_ : Yes -Property description not available. +The ARN of the AWS Key Management Service (AWS KMS) customer managed key that is used to encrypt your durable execution's payload data, including input, output, and error payloads.