AWS deadline-cloud documentation change
Summary
Formatting changes to IAM policy examples (indentation, line breaks) and replaced REGION placeholder with us-east-1
Security assessment
Changes are purely structural/formatting improvements to JSON policies. No new security content added or vulnerabilities addressed.
Diff
diff --git a/deadline-cloud/latest/developerguide/security-best-practices.md b/deadline-cloud/latest/developerguide/security-best-practices.md index 9279cbeaa..a78b0f932 100644 --- a//deadline-cloud/latest/developerguide/security-best-practices.md +++ b//deadline-cloud/latest/developerguide/security-best-practices.md @@ -140 +140,3 @@ JSON - "StringEquals": { "aws:ResourceAccount": "ACCOUNT_ID" } + "StringEquals": { + "aws:ResourceAccount": "ACCOUNT_ID" + } @@ -144 +146,3 @@ JSON - "Action": ["logs:GetLogEvents"], + "Action": [ + "logs:GetLogEvents" + ], @@ -146 +150 @@ JSON - "Resource": "arn:aws:logs:REGION:ACCOUNT_ID:log-group:/aws/deadline/FARM_ID/*" + "Resource": "arn:aws:logs:us-east-1:ACCOUNT_ID:log-group:/aws/deadline/FARM_ID/*" @@ -165 +169,3 @@ JSON - "Action": ["sts:AssumeRole"], + "Action": [ + "sts:AssumeRole" + ], @@ -167 +173,3 @@ JSON - "Principal": { "Service": "deadline.amazonaws.com" }, + "Principal": { + "Service": "deadline.amazonaws.com" + }, @@ -169 +177,3 @@ JSON - "StringEquals": { "aws:SourceAccount": "ACCOUNT_ID" }, + "StringEquals": { + "aws:SourceAccount": "ACCOUNT_ID" + }, @@ -171 +181 @@ JSON - "aws:SourceArn": "arn:aws:deadline:REGION:ACCOUNT_ID:farm/FARM_ID" + "aws:SourceArn": "arn:aws:deadline:us-east-1:ACCOUNT_ID:farm/FARM_ID" @@ -176 +186,3 @@ JSON - "Action": ["sts:AssumeRole"], + "Action": [ + "sts:AssumeRole" + ], @@ -178 +190,3 @@ JSON - "Principal": { "Service": "credentials.deadline.amazonaws.com" }, + "Principal": { + "Service": "credentials.deadline.amazonaws.com" + }, @@ -180 +194,3 @@ JSON - "StringEquals": { "aws:SourceAccount": "ACCOUNT_ID" }, + "StringEquals": { + "aws:SourceAccount": "ACCOUNT_ID" + }, @@ -182 +198 @@ JSON - "aws:SourceArn": "arn:aws:deadline:REGION:ACCOUNT_ID:farm/FARM_ID" + "aws:SourceArn": "arn:aws:deadline:us-east-1:ACCOUNT_ID:farm/FARM_ID"