AWS serverless-application-model medium security documentation change
Summary
Modified prerequisites to emphasize secure access setup and removed GPG key expiration warning for Linux installer verification.
Security assessment
The removal of the GPG key expiration warning eliminates a security notice about future verification requirements, potentially impacting users' ability to validate installers after 2025. However, the change also adds security documentation by updating prerequisite language from 'administrative IAM user' to 'secure access to AWS', promoting better security practices.
Diff
diff --git a/serverless-application-model/latest/developerguide/install-sam-cli.md b/serverless-application-model/latest/developerguide/install-sam-cli.md index 18cc70f7b..4786c3d37 100644 --- a//serverless-application-model/latest/developerguide/install-sam-cli.md +++ b//serverless-application-model/latest/developerguide/install-sam-cli.md @@ -19 +19 @@ Complete all [prerequisites](./prerequisites.html) in the previous section befor - 2. Creating an administrative IAM user. + 2. Setting up secure access to AWS. @@ -67,4 +66,0 @@ x86_64 - command line installer -###### Important - -The current GPG keys used for AWS SAM CLI Linux installer verification will expire on May 22, 2025. New GPG keys will be published before this date. To ensure you can continue verifying the AWS SAM CLI Linux installer, we recommend you update your GPG keyrings with the new keys when they become available. - @@ -101,4 +96,0 @@ arm64 - command line installer -###### Important - -The current GPG keys used for AWS SAM CLI Linux installer verification will expire on May 22, 2025. New GPG keys will be published before this date. To ensure you can continue verifying the AWS SAM CLI Linux installer, we recommend you update your GPG keyrings with the new keys when they become available. -