AWS codebuild medium security documentation change

Service: codebuild · 2025-08-13 · Security-related medium

File: codebuild/latest/userguide/connections-bitbucket-app.md

Summary

Updated resource ARN pattern in IAM policy example

Security assessment

Changed from placeholder '<connection-arn>' to wildcard pattern 'arn:aws:iam::*:role/Service*', which could over-expand permissions if not intentional. Wildcards in IAM policies require careful scoping.

Diff

diff --git a/codebuild/latest/userguide/connections-bitbucket-app.md b/codebuild/latest/userguide/connections-bitbucket-app.md
index 88ba8f1fe..6ac295523 100644
--- a//codebuild/latest/userguide/connections-bitbucket-app.md
+++ b//codebuild/latest/userguide/connections-bitbucket-app.md
@@ -67 +67 @@ JSON
-                    "connection-arn>"
+                    "arn:aws:iam::*:role/Service*"