AWS AWSCloudFormation documentation change
Summary
Removed JSON example of IAM policy for Git sync setup permissions
Security assessment
The change removes an example IAM policy but doesn't indicate any security vulnerability or weakness. IAM policies are security-related configurations, but their removal from documentation doesn't constitute a security issue.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/git-sync-prereq.md b/AWSCloudFormation/latest/UserGuide/git-sync-prereq.md index 528832b4f..cb72fedc8 100644 --- a//AWSCloudFormation/latest/UserGuide/git-sync-prereq.md +++ b//AWSCloudFormation/latest/UserGuide/git-sync-prereq.md @@ -269,55 +268,0 @@ The following example IAM policy includes the user permissions needed to set up -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "CodeConnectionsPermissions", - "Effect": "Allow", - "Action": [ - "codeconnections:CreateRepositoryLink", - "codeconnections:CreateSyncConfiguration", - "codeconnections:DeleteRepositoryLink", - "codeconnections:DeleteSyncConfiguration", - "codeconnections:GetRepositoryLink", - "codeconnections:GetSyncConfiguration", - "codeconnections:ListRepositoryLinks", - "codeconnections:ListSyncConfigurations", - "codeconnections:ListTagsForResource", - "codeconnections:TagResource", - "codeconnections:UntagResource", - "codeconnections:UpdateRepositoryLink", - "codeconnections:UpdateSyncBlocker", - "codeconnections:UpdateSyncConfiguration", - "codeconnections:UseConnection", - "codeconnections:CreateForcedTargetSync", - "codeconnections:CreatePullRequestForResource" - ], - "Resource": "*" - }, - { - "Sid": "CloudFormationConsolePermissions", - "Effect": "Allow", - "Action": [ - "cloudformation:CreateChangeSet", - "cloudformation:DeleteChangeSet", - "cloudformation:DescribeChangeSet", - "cloudformation:DescribeStackEvents", - "cloudformation:DescribeStacks", - "cloudformation:ExecuteChangeSet", - "cloudformation:GetTemplate", - "cloudformation:ListChangeSets", - "cloudformation:ListStacks", - "cloudformation:ValidateTemplate" - ], - "Resource": "*" - } - ] - } - -