AWS ram documentation change
Summary
Added AWS CodeConnections to list of shareable resources with documentation about connection sharing use cases
Security assessment
Adds documentation about resource sharing capabilities which relate to access management security features, but does not address specific security vulnerabilities
Diff
diff --git a/ram/latest/userguide/shareable.md index 3b5489d7a..7beb08087 100644 --- a/ram/latest/userguide/shareable.md +++ b/ram/latest/userguide/shareable.md @@ -5 +5 @@ -AWS App MeshAWS AppSync GraphQL APIAmazon API GatewayAmazon Application Recovery Controller (ARC)Amazon AuroraAWS BackupAmazon BedrockAWS Billing View ServiceAWS CloudHSMAWS CodeBuildAmazon DataZoneAmazon EC2EC2 Image BuilderElastic Load BalancingAWS End User Messaging SMSAmazon FSx for OpenZFSAWS GlueAWS License ManagerAWS MarketplaceAWS Migration Hub Refactor SpacesAWS Network FirewallAWS OutpostsAmazon S3 on OutpostsAWS Private Certificate AuthorityAWS Resource ExplorerAWS Resource GroupsAmazon Route 53Amazon Simple Storage ServiceAmazon SageMaker AIAWS Service Catalog AppRegistryAWS Systems Manager Incident ManagerAWS Systems Manager Parameter StoreAmazon VPCAmazon VPC LatticeAWS Cloud WAN +AWS App MeshAWS AppSync GraphQL APIAmazon API GatewayAmazon Application Recovery Controller (ARC)Amazon AuroraAWS BackupAmazon BedrockAWS Billing View ServiceAWS CloudHSMAWS CodeBuildAWS CodeConnectionsAmazon DataZoneAmazon EC2EC2 Image BuilderElastic Load BalancingAWS End User Messaging SMSAmazon FSx for OpenZFSAWS GlueAWS License ManagerAWS MarketplaceAWS Migration Hub Refactor SpacesAWS Network FirewallAWS OutpostsAmazon S3 on OutpostsAWS Private Certificate AuthorityAWS Resource ExplorerAWS Resource GroupsAmazon Route 53Amazon Simple Storage ServiceAmazon SageMaker AIAWS Service Catalog AppRegistryAWS Systems Manager Incident ManagerAWS Systems Manager Parameter StoreAmazon VPCAmazon VPC LatticeAWS Cloud WAN @@ -99,0 +100,8 @@ Report group `codebuild:ReportGroup` | Create a report group, and use it to cre +## AWS CodeConnections + +You can share the following CodeConnections resources by using AWS RAM. + +Resource type and code | Use case | Can share with IAM users and roles | Can share with accounts outside its organization | Can use customer managed permissions | Can share with service principals +---|---|---|---|---|--- +Code Connections `codeconnections:Connection` | Manage the reuse of code connections in multiple accounts. In other words, sharing code connections reduces the administrator burden and need for administrator access in every account that requires a code connection. For more information, see [Share connections with AWS accounts](https://docs.aws.amazon.com/dtconsole/latest/userguide/connections-share.html) in the _Developer Tools Console User Guide_. | No | Yes Can share with **any** AWS account. | Yes | No +