AWS codebuild medium security documentation change
Summary
Updated AWS managed policies for CodeBuild to expand CodeConnections resource ARN pattern
Security assessment
The change modifies IAM policy resource patterns from 'arn:aws:codeconnections:*:*:connection/*' to 'arn:aws:codeconnections:*:*:*', which expands permissions. This could introduce over-permissive policies if not properly constrained elsewhere.
Diff
diff --git a/codebuild/latest/userguide/history.md b/codebuild/latest/userguide/history.md index 47733568f..6310c597f 100644 --- a//codebuild/latest/userguide/history.md +++ b//codebuild/latest/userguide/history.md @@ -17,0 +18 @@ Change| Description| Date +[Updated content: AWS managed (predefined) policies for AWS CodeBuild](./auth-and-access-control-iam-identity-based-access-control.html#managed-policies)| The AWSCodeBuildAdminAccess, AWSCodeBuildDeveloperAccess, and AWSCodeBuildReadOnlyAccess policies have been updated. The original resource `arn:aws:codeconnections:*:*:connection/*` has been updated to `arn:aws:codeconnections:*:*:*`.| June 10, 2025