AWS opsworks documentation change
Summary
Marked AWS managed policies as deprecated and updated policy syntax
Security assessment
Deprecation notices for policies due to service deprecation inform users to avoid outdated configurations, which is a security best practice. No direct evidence of addressing an active security vulnerability.
Diff
diff --git a/opsworks/latest/userguide/security-iam-awsmanpol.md b/opsworks/latest/userguide/security-iam-awsmanpol.md index bce0906cf..c69506dce 100644 --- a//opsworks/latest/userguide/security-iam-awsmanpol.md +++ b//opsworks/latest/userguide/security-iam-awsmanpol.md @@ -15 +15 @@ Additionally, AWS supports managed policies for job functions that span multiple -## AWS managed policy: `AWSOpsWorksCMServiceRole` +## AWS managed policy: `AWSOpsWorksCMServiceRole` \- Deprecated @@ -20,0 +21,2 @@ This policy grants `administrative` permissions that allow OpsWorks CM administr +For more information, see [Deprecated AWS managed policies](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/about-managed-policy-reference.html#deprecated-managed-policies) in the _AWS Managed Policy Reference Guide_. + @@ -45,0 +48,6 @@ This policy includes the following permissions. +JSON + + +**** + + @@ -224 +232,2 @@ This policy includes the following permissions. -## AWS managed policy: `AWSOpsWorksCMInstanceProfileRole` + +## AWS managed policy: `AWSOpsWorksCMInstanceProfileRole` \- Deprecated @@ -229,0 +239,2 @@ This policy grants `administrative` permissions that allow the Amazon EC2 instan +For more information, see [Deprecated AWS managed policies](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/about-managed-policy-reference.html#deprecated-managed-policies) in the _AWS Managed Policy Reference Guide_. + @@ -244,0 +256,6 @@ This policy includes the following permissions. +JSON + + +**** + + @@ -291 +309,2 @@ Change | Description | Date -AWSOpsWorksCMInstanceProfileRole \- Updated managed policy | OpsWorks CM updated the managed policy that allows the EC2 instances used as OpsWorks CM servers to share information with CloudFormation and Secrets Manager, and manage backups. The change adds `opsworks-cm!` to the resource name for Secrets Manager secrets, so that OpsWorks CM is allowed to own the secrets. | April 23, 2021 +AWSOpsWorksCMInstanceProfileRole \- Deprecated | This policy has been deprecated because the service is deprecated. | May 26, 2025 +AWSOpsWorksCMServiceRole \- Deprecated | This policy has been deprecated because the service is deprecated. | May 26, 2025