AWS AWSEC2 medium security documentation change
Summary
Updated IAM policy examples to use specific instance IDs and removed JSON formatting dividers
Security assessment
Changed resource ARN from 'arn:aws:ec2:region:account-id:instance/' to a specific instance ID (i-0598c7d356eba48d7), demonstrating least privilege access. This improves security documentation by showing granular resource restrictions.
Diff
diff --git a/AWSEC2/latest/UserGuide/configure-access-to-serial-console.md b/AWSEC2/latest/UserGuide/configure-access-to-serial-console.md index 1fc6cb77b..fa77174f0 100644 --- a//AWSEC2/latest/UserGuide/configure-access-to-serial-console.md +++ b//AWSEC2/latest/UserGuide/configure-access-to-serial-console.md @@ -79,6 +78,0 @@ The following policy grants permissions to view the account status, and to allow -JSON - - -**** - - @@ -294,6 +286,0 @@ Note that the `DescribeInstances`, `DescribeInstanceTypes`, and `GetSerialConsol -JSON - - -**** - - @@ -320 +307 @@ JSON - "Resource": "arn:aws:ec2:region:account-id:instance/" + "Resource": "arn:aws:ec2:region:account-id:instance/i-0598c7d356eba48d7" @@ -330,6 +315,0 @@ The following IAM policy allows access to the serial console of all instances, d -JSON - - -**** - - @@ -357 +337 @@ JSON - "Resource": "arn:aws:ec2:region:account-id:instance/" + "Resource": "arn:aws:ec2:region:account-id:instance/i-0598c7d356eba48d7" @@ -373,6 +351,0 @@ Note that the `DescribeInstances`, `DescribeInstanceTypes`, and `GetSerialConsol -JSON - - -**** - -