AWS proton documentation change
Summary
Formatting improvements including bold text for role names, code formatting for policy names, and corrected relative links. Clarified recreation instructions for service-linked roles.
Security assessment
Changes are documentation formatting improvements and clarifications about existing service-linked roles, but do not address specific security vulnerabilities or introduce new security features.
Diff
diff --git a/proton/latest/userguide/using-service-linked-roles-sync.md b/proton/latest/userguide/using-service-linked-roles-sync.md index ac39cfc97..0241acd56 100644 --- a//proton/latest/userguide/using-service-linked-roles-sync.md +++ b//proton/latest/userguide/using-service-linked-roles-sync.md @@ -21 +21 @@ AWS Proton uses two service-linked roles named **AWSServiceRoleForProtonSync** a -The AWSServiceRoleForProtonSync service-linked role trusts the following services to assume the role: +The **AWSServiceRoleForProtonSync** service-linked role trusts the following services to assume the role: @@ -28 +28 @@ The AWSServiceRoleForProtonSync service-linked role trusts the following service -The role permissions policy named AWSProtonSyncServiceRolePolicy allows AWS Proton to complete the following actions on the specified resources: +The role permissions policy named `AWSProtonSyncServiceRolePolicy` allows AWS Proton to complete the following actions on the specified resources: @@ -83 +83 @@ This policy includes the following permissions: -For information on the the AWSProtonSyncServiceRolePolicy, see [AWS managed policy: AWSProtonSyncServiceRolePolicy](https://docs.aws.amazon.com/proton/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSProtonSyncServiceRolePolicy). +For more information about this policy, see [AWS managed policy: AWSProtonSyncServiceRolePolicy](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSProtonSyncServiceRolePolicy). @@ -85 +85 @@ For information on the the AWSProtonSyncServiceRolePolicy, see [AWS managed poli -The AWSServiceRoleForProtonServiceSync service-linked role trusts the following services to assume the role: +The **AWSServiceRoleForProtonServiceSync** service-linked role trusts the following services to assume the role: @@ -92 +92 @@ The AWSServiceRoleForProtonServiceSync service-linked role trusts the following -The role permissions policy named AWSServiceRoleForProtonServiceSync allows AWS Proton to complete the following actions on the specified resources: +The role permissions policy named `AWSProtonServiceGitSyncServiceRolePolicy` allows AWS Proton to complete the following actions on the specified resources: @@ -130 +130 @@ This policy includes the following permissions: -For information on the the AwsProtonServiceSyncServiceRolePolicy, see [AWS managed policy: AwsProtonServiceSyncServiceRolePolicy](https://docs.aws.amazon.com/proton/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AwsProtonServiceSyncServiceRolePolicy). +For more information about this policy, see [AWS managed policy: AWSProtonServiceGitSyncServiceRolePolicy](./security-iam-awsmanpol.html#security-iam-awsmanpol-AwsProtonServiceGitSyncServiceRolePolicy). @@ -140 +140 @@ If you delete this service-linked role, and then need to create it again, you ca -To recreate the AWSServiceRoleForProtonSync service-linked role, you would want to configure a repository for sync, and to recreate AWSServiceRoleForProtonServiceSync, you would want to configure a service for sync. +To recreate the **AWSServiceRoleForProtonSync** service-linked role, you would want to configure a repository for sync, and to recreate **AWSServiceRoleForProtonServiceSync** , you would want to configure a service for sync. @@ -144 +144 @@ To recreate the AWSServiceRoleForProtonSync service-linked role, you would want -AWS Proton doesn't allow you to edit the AWSServiceRoleForProtonSync service-linked role. After you create a service-linked role, you can't change the name of the role because various entities might reference the role. However, you can edit the description of the role using IAM. For more information, see [Editing a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. +AWS Proton doesn't allow you to edit the **AWSServiceRoleForProtonSync** service-linked role. After you create a service-linked role, you can't change the name of the role because various entities might reference the role. However, you can edit the description of the role using IAM. For more information, see [Editing a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. @@ -148 +148 @@ AWS Proton doesn't allow you to edit the AWSServiceRoleForProtonSync service-lin -You don't need to manually delete the AWSServiceRoleForProtonSync role. When you delete all AWS Proton linked repositories for repository sync in the AWS Management Console, the AWS CLI, or the AWS API, AWS Proton cleans up the resources and deletes the service-linked role for you. +You don't need to manually delete the **AWSServiceRoleForProtonSync** role. When you delete all AWS Proton linked repositories for repository sync in the AWS Management Console, the AWS CLI, or the AWS API, AWS Proton cleans up the resources and deletes the service-linked role for you.