AWS codebuild high security documentation change

Service: codebuild · 2025-08-13 · Security-related high

File: codebuild/latest/userguide/sample-lambda-sam-gradle.md

Summary

Modified IAM policy to restrict Resource from wildcard (*) to specific IAM role patterns

Security assessment

Changed from 'Resource': '*' to 'arn:aws:iam::*:role/Service*' reduces attack surface by limiting permissions to specific role patterns, addressing potential over-privilege security risks.

Diff

diff --git a/codebuild/latest/userguide/sample-lambda-sam-gradle.md b/codebuild/latest/userguide/sample-lambda-sam-gradle.md
index 46e0f06b5..5669b3be0 100644
--- a//codebuild/latest/userguide/sample-lambda-sam-gradle.md
+++ b//codebuild/latest/userguide/sample-lambda-sam-gradle.md
@@ -90 +90 @@ JSON
-                "Resource": "*"
+                "Resource": "arn:aws:iam::*:role/Service*"