AWS opsworks documentation change
Summary
Updated IAM policy examples with region specificity and JSON formatting
Security assessment
Changed ARN region from placeholder to 'us-east-1' for clarity and added JSON sections. No evidence of addressing security vulnerabilities.
Diff
diff --git a/opsworks/latest/userguide/opsworks-security-users-examples.md b/opsworks/latest/userguide/opsworks-security-users-examples.md index 7c4bf82c4..23455ffa5 100644 --- a//opsworks/latest/userguide/opsworks-security-users-examples.md +++ b//opsworks/latest/userguide/opsworks-security-users-examples.md @@ -46,0 +47,6 @@ You can restrict the **Manage** permissions level to allow a user perform all ** +JSON + + +**** + + @@ -57 +63 @@ You can restrict the **Manage** permissions level to allow a user perform all ** - "Resource": "arn:aws:opsworks:region:account_id:stack/stack_id/" + "Resource": "arn:aws:opsworks:us-east-1:account_id:stack/stack_id/" @@ -66,0 +74,6 @@ The **Manage** permissions level doesn't allow users to create or clone stacks. +JSON + + +**** + + @@ -103,0 +118,6 @@ The **Manage** permissions level allows the user to [register and deregister Ama +JSON + + +**** + + @@ -123,0 +145,6 @@ The **Manage** permissions level doesn't allow users to import users into OpsWor +JSON + + +**** + + @@ -153,0 +182,6 @@ The **Deploy** permissions level doesn't allow users to create or delete apps. Y +JSON + + +**** + + @@ -164 +198 @@ The **Deploy** permissions level doesn't allow users to create or delete apps. Y - "Resource": "arn:aws:opsworks:region:account_id:stack/stack_id/" + "Resource": "arn:aws:opsworks:us-east-1:account_id:stack/stack_id/"