AWS AWSCloudFormation documentation change
Summary
Expanded tagging documentation with permission requirements and access control context
Security assessment
Adds details about IAM permissions (cloudwatch:TagResource) and tag-based access control strategies, enhancing security best practice documentation.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-aiops-investigationgroup-tag.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-aiops-investigationgroup-tag.md index 62f11b553..c9144280f 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-aiops-investigationgroup-tag.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-aiops-investigationgroup-tag.md @@ -9 +9,3 @@ This is the new _AWS CloudFormation Template Reference Guide_. Please update you -One of the key-value pairs associated with the investigation group. Tags can help you organize and categorize your resources. +A list of key-value pairs to associate with the investigation group. You can associate as many as 50 tags with an investigation group. To be able to associate tags when you create the investigation group, you must have the `cloudwatch:TagResource` permission. + +Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values. @@ -36 +38,7 @@ To declare this entity in your AWS CloudFormation template, use the following sy -A string that you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources, including investigation groups. +Assigns one or more tags (key-value pairs) to the specified resource. + +Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values. + +Tags don't have any semantic meaning to AWS and are interpreted strictly as strings of characters. + +You can associate as many as 50 tags with a resource. @@ -51 +59,3 @@ _Required_ : Yes -The value for the specified tag key. +A list of key-value pairs to associate with the investigation group. You can associate as many as 50 tags with an investigation group. To be able to associate tags when you create the investigation group, you must have the `cloudwatch:TagResource` permission. + +Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values.