AWS Security ChangesHomeSearch

AWS tk-dotnet-refactoring documentation change

Service: tk-dotnet-refactoring · 2025-08-10 · Documentation low

File: tk-dotnet-refactoring/latest/userguide/roles-and-policies.md

Summary

Added JSON formatting examples and replaced placeholder ARNs with concrete examples in IAM role/policy documentation

Security assessment

The changes enhance security documentation by providing valid JSON policy examples with real ARN patterns, reducing the risk of IAM configuration errors. No evidence of addressing a specific security vulnerability, but improves security posture through clearer guidance.

Diff

diff --git a/tk-dotnet-refactoring/latest/userguide/roles-and-policies.md b/tk-dotnet-refactoring/latest/userguide/roles-and-policies.md
index b7ad8337c..4f57802ab 100644
--- a//tk-dotnet-refactoring/latest/userguide/roles-and-policies.md
+++ b//tk-dotnet-refactoring/latest/userguide/roles-and-policies.md
@@ -42,0 +43,6 @@ Use the AWS Management Console to create roles and policies to use Toolkit for .
+JSON
+    
+
+****
+    
+    
@@ -61,0 +69,6 @@ Use the AWS Management Console to create roles and policies to use Toolkit for .
+JSON
+    
+
+****
+    
+    
@@ -83,0 +98,6 @@ Use the AWS Management Console to create roles and policies to use Toolkit for .
+JSON
+    
+
+****
+    
+    
@@ -214 +235,7 @@ To allow the user to be assigned a role, you must edit the trust relationship fo
-Edit the trust relationship to add the principal: `"AWS": "`<user_ARN>`"`: 
+Edit the trust relationship to add the principal with the ARN of the user:
+
+JSON
+    
+
+****
+    
@@ -222 +249 @@ Edit the trust relationship to add the principal: `"AWS": "`<user_ARN>`"`:
-          "AWS": "<user_ARN>",
+          "AWS": "arn:aws:iam::123456789012:user/John",