AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-07-07 · Documentation low

File: AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.md

Summary

Added multiple JSON code block markers and section dividers (****) throughout IAM role documentation

Security assessment

Changes appear to be formatting improvements for JSON examples and section breaks without modifying actual security policies or configurations

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.md b/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.md
index cdd654f30..95a371714 100644
--- a//AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.md
+++ b//AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.md
@@ -75,0 +76,8 @@ The administration role created by the preceding template includes the following
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -95,0 +105,8 @@ The preceding template also includes the following trust policy that grants the
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -115,0 +134,8 @@ The following example trust policy grants the service permission to use the admi
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -149,0 +177,8 @@ The role created by this template enables the following policy on a target accou
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -165,0 +202,8 @@ The following example shows a policy statement with the _minimum_ permissions fo
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -183,0 +229,8 @@ The following trust relationship is created by the template. The administrator a
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -235,0 +290,8 @@ Create an [IAM service role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -270,0 +334,8 @@ You must provide a trust policy for the service role to defines which IAM princi
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -290,0 +363,8 @@ The following example trust policy grants the service permission to use the admi
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -315,0 +397,8 @@ In the example below, `customized_admin_role` refers to the administration role
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -343,0 +434,8 @@ The following example shows a policy statement with the _minimum_ permissions fo
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -361,0 +461,8 @@ You must provide the following trust policy when you create the role to define t
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -396,0 +505,8 @@ The following example is a permissions policy for both the **AWSCloudFormationSt
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -423,0 +541,8 @@ The following example provides the minimum permissions for StackSets, along with
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -448,0 +575,8 @@ You must provide the following trust policy when you create the role to define t
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -483,0 +619,8 @@ When using StackSets, define the global keys `aws:SourceAccount` and `aws:Source
+JSON
+
+JSON
+    
+
+****
+    
+