AWS lambda documentation change
Summary
Updated code signing policy examples and documentation links
Security assessment
Enhances documentation for code signing security controls but does not address a specific vulnerability
Diff
diff --git a/lambda/latest/dg/config-codesigning-policies.md b/lambda/latest/dg/config-codesigning-policies.md index 0ea122c3a..5ce74b886 100644 --- a//lambda/latest/dg/config-codesigning-policies.md +++ b//lambda/latest/dg/config-codesigning-policies.md @@ -7 +7 @@ -To grant permission for a user to access the [code signing API operations](./configuration-codesigning.html#config-codesigning-api), attach one or more policy statements to the user policy. For more information about user policies, see [Identity-based IAM policies for Lambda](./access-control-identity-based.html). +To grant permission for a user to access Lambda code signing API operations, attach one or more policy statements to the user policy. For more information about user policies, see [Identity-based IAM policies for Lambda](./access-control-identity-based.html). @@ -29 +29 @@ Administrators can use the `CodeSigningConfigArn` condition key to specify the c -The following example policy statement grants permission to create a function. The policy statement includes a `lambda:CodeSigningConfigArn` condition to specify the allowed code signing configuration. Lambda blocks any `CreateFunction` API request if its `CodeSigningConfigArn` parameter is missing or does not match the value in the condition. +The following example policy statement grants permission to create a function. The policy statement includes a `lambda:CodeSigningConfigArn` condition to specify the allowed code signing configuration. Lambda blocks `CreateFunction` API requests if the [CodeSigningConfigArn](https://docs.aws.amazon.com/lambda/latest/api/API_CreateFunction.html#lambda-CreateFunction-request-CodeSigningConfigArn) parameter is missing or does not match the value in the condition. @@ -39 +39 @@ The following example policy statement grants permission to create a function. T - "lambda:CreateFunction", + "lambda:CreateFunction" @@ -44,2 +44 @@ The following example policy statement grants permission to create a function. T - "lambda:CodeSigningConfigArn": - “arn:aws:lambda:us-west-2:123456789012:code-signing-config:csc-0d4518bd353a0a7c6” + "lambda:CodeSigningConfigArn": "arn:aws:lambda:us-east-1:111122223333:code-signing-config:csc-0d4518bd353a0a7c6" @@ -58 +57 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Update configuration +Create configuration