AWS AWSCloudFormation documentation change
Summary
Removed examples and see also section
Security assessment
Removal of example configurations does not indicate a security fix. The deleted examples included S3 access policies and SSH keys, but their removal appears to be general documentation cleanup rather than security-related.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-transfer-user.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-transfer-user.md index 6e59feb4e..00a3ed940 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-transfer-user.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-transfer-user.md @@ -3 +3 @@ -SyntaxPropertiesReturn valuesExamplesSee also +SyntaxPropertiesReturn values @@ -281,92 +280,0 @@ An example `UserName` is `transfer-user-1`. -## Examples - -### Associate a user with a server - -The following example associates a user with a server. - -#### JSON - - - "User": { - "Type": "AWS::Transfer::User", - "Properties": { - "HomeDirectoryMappings": [ - { - "Entry": "/", - "Target": "/my-bucket/" - } - ], - "HomeDirectoryType": "LOGICAL", - "Policy": { - "Fn::Sub": "{ - \"Version\": \"2012-10-17T00:00:00.000Z\", - \"Statement\": { - \"Sid\": \"AllowFullAccessToBucket\", - \"Action\": \"s3:*\", - \"Effect\": \"Allow\", - \"Resource\": [ - \"arn:${AWS::Partition}:s3:::my-bucket\", - \"arn:${AWS::Partition}:s3:::my-bucket/*\" - ] - } - }" - }, - "Role": { - "Fn::Sub": "arn:aws:iam::${AWS::AccountId}:role/Admin" - }, - "ServerId": { - "Fn::GetAtt": "Server.ServerId" - }, - "SshPublicKeys": [ - "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAn5ZA7REHaFT40KsZzYnuS7vzdP8n46akEpXLpzrOkbRPEqoOXlDk8f+2SrnANUGfjVVnTqhdrI7S90B4lyBIdWdinhVUK+W0we8j6nCMhtnjigXs6dtxvESUEzrWLWlQpPNJXDSnZEEWoQ/q7W4xXynD6GM3pko36ipA5Xv6hQWC7faYOb2FWLzN1NsngaowO1R6FRau+/oIu" - ], - "Tags": [ - { - "Key": "KeyName", - "Value": "ValueName" - } - ], - "UserName": "my-user" - } - } - -#### YAML - - - User: - Type: AWS::Transfer::User - Properties: - HomeDirectoryMappings: - - Entry: / - Target: /my-bucket/ - HomeDirectoryType: LOGICAL - Policy: - Fn::Sub: | - { - "Version": "2012-10-17", - "Statement": { - "Sid": "AllowFullAccessToBucket", - "Action": "s3:*", - "Effect": "Allow", - "Resource": [ - "arn:aws:s3:::my-bucket", - "arn:aws:s3:::my-bucket/*" - ] - } - } - Role: - Fn::Sub: arn:aws:iam::${AWS::AccountId}:role/Admin - ServerId: - Fn::GetAtt: Server.ServerId - SshPublicKeys: - - ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAn5ZA7REHaFT40KsZzYnuS7vzdP8n46akEpXLpzrOkbRPEqoOXlDk8f+2SrnANUGfjVVnTqhdrI7S90B4lyBIdWdinhVUK+W0we8j6nCMhtnjigXs6dtxvESUEzrWLWlQpPNJXDSnZEEWoQ/q7W4xXynD6GM3pko36ipA5Xv6hQWC7faYOb2FWLzN1NsngaowO1R6FRau+/oIu - Tags: - - Key: KeyName - Value: ValueName - UserName: my-user - - -## See also - -[CreateUser](https://docs.aws.amazon.com/transfer/latest/userguide/API_CreateUser.html) in the _AWS Transfer Family User Guide_. -