AWS cli documentation change
Summary
Enhanced IAM instance profile documentation with security guidance link
Security assessment
Added reference to security documentation for IAM instance profiles, improving security best practice guidance but not addressing a specific vulnerability
Diff
diff --git a/cli/latest/reference/pcs/create-compute-node-group.md b/cli/latest/reference/pcs/create-compute-node-group.md index 8df0f5059..7015a1e81 100644 --- a//cli/latest/reference/pcs/create-compute-node-group.md +++ b//cli/latest/reference/pcs/create-compute-node-group.md @@ -15 +15 @@ - * [AWS CLI 2.28.8 Command Reference](../../index.html) » + * [AWS CLI 2.28.11 Command Reference](../../index.html) » @@ -170,8 +170 @@ JSON Syntax: -> The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have the `pcs:RegisterComputeNodeGroupInstance` permission. The resource identifier of the ARN must start with `AWSPCS` or it must have `/aws-pcs/` in its path. -> ->> **Examples** -> -> * `arn:aws:iam::111122223333:instance-profile/AWSPCS-example-role-1` -> * `arn:aws:iam::111122223333:instance-profile/aws-pcs/example-role-2` -> - +> The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have the `pcs:RegisterComputeNodeGroupInstance` permission and the role name must start with `AWSPCS` or must have the path `/aws-pcs/` . For more information, see [IAM instance profiles for PCS](https://docs.aws.amazon.com/pcs/latest/userguide/security-instance-profiles.html) in the _PCS User Guide_ . @@ -503,8 +496 @@ computeNodeGroup -> (structure) ->> The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have the `pcs:RegisterComputeNodeGroupInstance` permission. The resource identifier of the ARN must start with `AWSPCS` or it must have `/aws-pcs/` in its path. ->> ->>> **Examples** ->> ->> * `arn:aws:iam::111122223333:instance-profile/AWSPCS-example-role-1` ->> * `arn:aws:iam::111122223333:instance-profile/aws-pcs/example-role-2` ->> - +>> The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have the `pcs:RegisterComputeNodeGroupInstance` permission and the role name must start with `AWSPCS` or must have the path `/aws-pcs/` . For more information, see [IAM instance profiles for PCS](https://docs.aws.amazon.com/pcs/latest/userguide/security-instance-profiles.html) in the _PCS User Guide_ . @@ -602 +588 @@ computeNodeGroup -> (structure) - * [AWS CLI 2.28.8 Command Reference](../../index.html) » + * [AWS CLI 2.28.11 Command Reference](../../index.html) »