AWS IAM documentation change
Summary
Updated example user references from 'JohnDoe' to 'John' in CloudTrail log examples
Security assessment
The changes are purely cosmetic updates to example user names in documentation scenarios. There is no indication of addressing security vulnerabilities or modifying security-related content.
Diff
diff --git a/IAM/latest/UserGuide/cloudtrail-integration.md b/IAM/latest/UserGuide/cloudtrail-integration.md index 235c5d2cc..f3112ec65 100644 --- a//IAM/latest/UserGuide/cloudtrail-integration.md +++ b//IAM/latest/UserGuide/cloudtrail-integration.md @@ -187 +187 @@ CloudTrail log files contain events that are formatted using JSON. An API event -The IAM user named `JohnDoe` in account 777788889999 calls the AWS STS [AssumeRole](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html) action to assume the role `EC2-dev` in account 111122223333\. The account administrator requires users to set a source identity equal to their user name when assuming the role. The user passes in the source identity value of `JohnDoe`. +The IAM user named `John` in account 777788889999 calls the AWS STS [AssumeRole](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html) action to assume the role `EC2-dev` in account 111122223333\. The account administrator requires users to set a source identity equal to their user name when assuming the role. The user passes in the source identity value of `John`. @@ -195 +195 @@ The IAM user named `JohnDoe` in account 777788889999 calls the AWS STS [AssumeRo - "arn": "arn:aws:iam::777788889999:user/JohnDoe", + "arn": "arn:aws:iam::777788889999:user/John", @@ -198 +198 @@ The IAM user named `JohnDoe` in account 777788889999 calls the AWS STS [AssumeRo - "userName": "JohnDoe" + "userName": "John" @@ -208,2 +208,2 @@ The IAM user named `JohnDoe` in account 777788889999 calls the AWS STS [AssumeRo - "roleSessionName": "JohnDoe-EC2-dev", - "sourceIdentity": "JohnDoe", + "roleSessionName": "John-EC2-dev", + "sourceIdentity": "John", @@ -219,2 +219,2 @@ The IAM user named `JohnDoe` in account 777788889999 calls the AWS STS [AssumeRo - "assumedRoleId": "AIDAQRSTUVWXYZEXAMPLE:JohnDoe-EC2-dev", - "arn": "arn:aws:sts::111122223333:assumed-role/EC2-dev/JohnDoe-EC2-dev" + "assumedRoleId": "AIDAQRSTUVWXYZEXAMPLE:John-EC2-dev", + "arn": "arn:aws:sts::111122223333:assumed-role/EC2-dev/John-EC2-dev" @@ -222 +222 @@ The IAM user named `JohnDoe` in account 777788889999 calls the AWS STS [AssumeRo - "sourceIdentity": "JohnDoe" + "sourceIdentity": "John" @@ -256,2 +256,2 @@ The second example shows the assumed role account's (111122223333) CloudTrail lo - "roleSessionName": "JohnDoe-EC2-dev", - "sourceIdentity": "JohnDoe", + "roleSessionName": "John-EC2-dev", + "sourceIdentity": "John", @@ -267,2 +267,2 @@ The second example shows the assumed role account's (111122223333) CloudTrail lo - "assumedRoleId": "AIDAQRSTUVWXYZEXAMPLE:JohnDoe-EC2-dev", - "arn": "arn:aws:sts::111122223333:assumed-role/EC2-dev/JohnDoe-EC2-dev" + "assumedRoleId": "AIDAQRSTUVWXYZEXAMPLE:John-EC2-dev", + "arn": "arn:aws:sts::111122223333:assumed-role/EC2-dev/John-EC2-dev" @@ -270 +270 @@ The second example shows the assumed role account's (111122223333) CloudTrail lo - "sourceIdentity": "JohnDoe" + "sourceIdentity": "John" @@ -279 +279 @@ The second example shows the assumed role account's (111122223333) CloudTrail lo -The following example shows a CloudTrail log entry for a request made by John Doe in account 111111111111\. John previously used his `JohnDoe` user to assume the `JohnRole1` role. For this request, he uses the credentials from that role to assume the `JohnRole2` role. This is known as [role chaining](./id_roles.html#iam-term-role-chaining). The source identity that he set when he assumed the `JohnDoe1` role persists in the request to assume `JohnRole2`. If John tries to set a different source identity when assuming the role, the request is denied. John passes two [session tags](./id_session-tags.html) into the request. He sets those two tags as transitive. The request inherits the `Department` tag as transitive because John set it as transitive when he assumed `JohnRole1`. For more information about source identity, see [Monitor and control actions taken with assumed roles](./id_credentials_temp_control-access_monitor.html). For more information about transitive keys in role chains, see [Chaining roles with session tags](./id_session-tags.html#id_session-tags_role-chaining). +The following example shows a CloudTrail log entry for a request made by John Doe in account 111111111111\. John previously used his `John` user to assume the `JohnRole1` role. For this request, he uses the credentials from that role to assume the `JohnRole2` role. This is known as [role chaining](./id_roles.html#iam-term-role-chaining). The source identity that he set when he assumed the `John1` role persists in the request to assume `JohnRole2`. If John tries to set a different source identity when assuming the role, the request is denied. John passes two [session tags](./id_session-tags.html) into the request. He sets those two tags as transitive. The request inherits the `Department` tag as transitive because John set it as transitive when he assumed `JohnRole1`. For more information about source identity, see [Monitor and control actions taken with assumed roles](./id_credentials_temp_control-access_monitor.html). For more information about transitive keys in role chains, see [Chaining roles with session tags](./id_session-tags.html#id_session-tags_role-chaining). @@ -287 +287 @@ The following example shows a CloudTrail log entry for a request made by John Do - "arn": "arn:aws:sts::111111111111:assumed-role/JohnDoe/JohnRole1", + "arn": "arn:aws:sts::111111111111:assumed-role/John/JohnRole1", @@ -300 +300 @@ The following example shows a CloudTrail log entry for a request made by John Do - "userName": "JohnDoe" + "userName": "John" @@ -302 +302 @@ The following example shows a CloudTrail log entry for a request made by John Do - "sourceIdentity": "JohnDoe" + "sourceIdentity": "John" @@ -327 +327 @@ The following example shows a CloudTrail log entry for a request made by John Do - "sourceIdentity": "JohnDoe", + "sourceIdentity": "John", @@ -344 +344 @@ The following example shows a CloudTrail log entry for a request made by John Do - "sourceIdentity": "JohnDoe" + "sourceIdentity": "John" @@ -728 +728 @@ The following example shows a CloudTrail log entry for a successful sign-in even - "arn":"arn:aws:iam::111122223333:user/JohnDoe", + "arn":"arn:aws:iam::111122223333:user/John", @@ -730 +730 @@ The following example shows a CloudTrail log entry for a successful sign-in even - "userName": "JohnDoe" + "userName": "John"