AWS prescriptive-guidance documentation change
Summary
Updated author affiliation and corrected quote formatting in IAM policy examples
Security assessment
The change improves documentation about IAM policy restrictions for CodeCommit access but does not address a specific security vulnerability. It reinforces security best practices by clarifying how to restrict resource access.
Diff
diff --git a/prescriptive-guidance/latest/patterns/give-sagemaker-notebook-instances-temporary-access-to-a-codecommit-repository-in-another-aws-account.md b/prescriptive-guidance/latest/patterns/give-sagemaker-notebook-instances-temporary-access-to-a-codecommit-repository-in-another-aws-account.md index f2ed23bef..be905aec9 100644 --- a//prescriptive-guidance/latest/patterns/give-sagemaker-notebook-instances-temporary-access-to-a-codecommit-repository-in-another-aws-account.md +++ b//prescriptive-guidance/latest/patterns/give-sagemaker-notebook-instances-temporary-access-to-a-codecommit-repository-in-another-aws-account.md @@ -9 +9 @@ SummaryPrerequisites and limitationsArchitectureToolsBest practicesEpicsRelated - _Created by Helge Aufderheide (AWS)_ + _Helge Aufderheide, Amazon Web Services_ @@ -201 +201 @@ To create a multitenant environment where more than one code repository is acces - 2. Restrict what code repositories that each role can assume by adding a **“Resource”** condition to each CodeCommit access role’s policy. + 2. Restrict what code repositories that each role can assume by adding a **"Resource"** condition to each CodeCommit access role’s policy. @@ -206 +206 @@ To create a multitenant environment where more than one code repository is acces -**Example “Resource” condition that restricts an IAM principal’s access to a specific CodeCommit repository** +**Example "Resource" condition that restricts an IAM principal’s access to a specific CodeCommit repository** @@ -215 +215 @@ To help identify and differentiate multiple code repositories in the same AWS ac -**Example “Resource” condition that refers to a code repository ARN that includes a specific prefix** +**Example "Resource" condition that refers to a code repository ARN that includes a specific prefix**