AWS codebuild high security documentation change

Service: codebuild · 2025-08-13 · Security-related high

File: codebuild/latest/userguide/project-sharing.md

Summary

Removed principal specification and updated resource ARN in sharing policy

Security assessment

Removed explicit principal and changed resource to wildcard ARN 'arn:aws:iam::*:role/Service*'. This could enable unintended access to projects if the policy is applied broadly.

Diff

diff --git a/codebuild/latest/userguide/project-sharing.md b/codebuild/latest/userguide/project-sharing.md
index c99a08984..1d1160668 100644
--- a//codebuild/latest/userguide/project-sharing.md
+++ b//codebuild/latest/userguide/project-sharing.md
@@ -85,3 +84,0 @@ JSON
-        "Principal":{
-          "AWS":"<consumer-aws-account-id-or-user>"
-        },
@@ -92 +89 @@ JSON
-        "Resource":"<arn-of-project-to-share>"
+        "Resource":"arn:aws:iam::*:role/Service*"