AWS eventbridge documentation change
Summary
Updated CloudFormation documentation with CLI examples, simplified branding references, and removed redundant section headers
Security assessment
The change adds AWS CLI examples using '--capabilities CAPABILITY_IAM', which documents security-related permissions required for IAM resource creation. However, there is no evidence this addresses a specific security vulnerability - it simply enhances existing documentation about secure CloudFormation stack creation practices.
Diff
diff --git a/eventbridge/latest/userguide/pipes-get-started.md b/eventbridge/latest/userguide/pipes-get-started.md index 96cb54f5e..2bbbf1528 100644 --- a//eventbridge/latest/userguide/pipes-get-started.md +++ b//eventbridge/latest/userguide/pipes-get-started.md @@ -28 +28 @@ For specific technical details of the template, see Template details. -## Creating the pipe using AWS CloudFormation +## Creating the pipe using CloudFormation @@ -36,2 +35,0 @@ You will be billed for the Amazon resources used if you create a stack from this -### Creating the template - @@ -49,2 +46,0 @@ First, create the CloudFormation template. -### Creating the stack - @@ -53 +49 @@ Next, use the template you've saved to provision a CloudFormation stack. - 1. Open the AWS CloudFormation console. + 1. Open the CloudFormation console at [https://console.aws.amazon.com/cloudformation/](https://console.aws.amazon.com/cloudformation/). @@ -81 +77 @@ Next, use the template you've saved to provision a CloudFormation stack. -Choosing this option prevents you from possibly being billed for resources whose deletion policy specifies they be retained even if the stack creation fails. For more information, see [`DeletionPolicy` attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) in the _AWS CloudFormation User Guide_. +Choosing this option prevents you from possibly being billed for resources whose deletion policy specifies they be retained even if the stack creation fails. For more information, see [`DeletionPolicy` attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) in the _CloudFormation User Guide_. @@ -94 +90,28 @@ Choosing this option prevents you from possibly being billed for resources whose -AWS CloudFormation creates the stack. Once the stack creation is complete, the stack resources are ready to use. You can use the **Resources** tab on the stack detail page to view the resources that where provisioned in your account. +###### Create the stack using CloudFormation (AWS CLI) + +You can also use the AWS CLI to create the stack. + + * Use the [`create-stack`](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/create-stack.html) command. + + * Accept the default template parameter values, specifying the stack name. Use the `template-body` parameter to pass the template contents, or `template-url` to specify a URL location. + + aws cloudformation create-stack \ + --stack-name eventbridge-rule-tutorial \ + --template-body template-contents \ + --capabilities CAPABILITY_IAM + + * Override the default value(s) of one or more template parameters. For example: + + aws cloudformation create-stack \ + --stack-name eventbridge-rule-tutorial \ + --template-body template-contents \ + --parameters \ + ParameterKey=SourceTableName,ParameterValue=pipe-example-source \ + ParameterKey=TargetQueueName,ParameterValue=pipe-example-target \ + ParameterKey=PipeName,ParameterValue=pipe-with-filtering-example \ + --capabilities CAPABILITY_IAM + + + + +CloudFormation creates the stack. Once the stack creation is complete, the stack resources are ready to use. You can use the **Resources** tab on the stack detail page to view the resources that where provisioned in your account. @@ -204 +227 @@ You will be billed for the Amazon resources contained in the stack for as long a - 1. Open the AWS CloudFormation console. + 1. Open the CloudFormation console at [https://console.aws.amazon.com/cloudformation/](https://console.aws.amazon.com/cloudformation/). @@ -219 +242 @@ This template creates resources and grants permissions in your account. -The AWS CloudFormation template for this tutorial will create the following resources in your account: +The CloudFormation template for this tutorial will create the following resources in your account: @@ -536 +559 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Getting started +Get started with event buses