AWS launchwizard documentation change
Summary
Updated IAM policy example with specific account ID (111122223333) and JSON syntax improvements
Security assessment
Provides clearer IAM policy examples for domain controller deployments, enhancing security documentation quality but not patching a specific vulnerability.
Diff
diff --git a/launchwizard/latest/userguide/launch-wizard-security.md b/launchwizard/latest/userguide/launch-wizard-security.md index 0a7d92b03..648f3f9df 100644 --- a//launchwizard/latest/userguide/launch-wizard-security.md +++ b//launchwizard/latest/userguide/launch-wizard-security.md @@ -126,0 +127,6 @@ If you deploy domain controllers into an existing VPC with an existing Active Di +JSON + + +**** + + @@ -130 +136,2 @@ If you deploy domain controllers into an existing VPC with an existing Active Di - "Statement": [{ + "Statement": [ + { @@ -133 +140,2 @@ If you deploy domain controllers into an existing VPC with an existing Active Di - "AWS": "arn:aws:iam::<account-id>:role/service-role/AmazonEC2RoleForLaunchWizard" + "AWS": + "arn:aws:iam::111122223333:role/service-role/AmazonEC2RoleForLaunchWizard" @@ -141 +148,0 @@ If you deploy domain controllers into an existing VPC with an existing Active Di - }] @@ -142,0 +150,3 @@ If you deploy domain controllers into an existing VPC with an existing Active Di + ] + } +