AWS codebuild medium security documentation change

Service: codebuild · 2025-08-13 · Security-related medium

File: codebuild/latest/userguide/report-groups-sharing.md

Summary

Updated principal and resource ARN in sharing policy example

Security assessment

Changed principal to specific account (111122223333) but resource to wildcard 'arn:aws:iam::*:role/Service*'. While principal is constrained, resource wildcard could allow over-sharing of report groups.

Diff

diff --git a/codebuild/latest/userguide/report-groups-sharing.md b/codebuild/latest/userguide/report-groups-sharing.md
index 6640b2ab2..844f50b1c 100644
--- a//codebuild/latest/userguide/report-groups-sharing.md
+++ b//codebuild/latest/userguide/report-groups-sharing.md
@@ -87 +87 @@ JSON
-           "AWS":"consumer-aws-account-id-or-user"
+           "AWS":"111122223333"
@@ -94 +94 @@ JSON
-         "Resource":"arn-of-report-group-to-share"
+         "Resource":"arn:aws:iam::*:role/Service*"