AWS govcloud-us documentation change
Summary
Removed example IAM policies for RoboMaker simulation jobs
Security assessment
Policy examples removal doesn't indicate security fixes - likely documentation restructuring
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-robomaker.md b/govcloud-us/latest/UserGuide/govcloud-robomaker.md index fd4e27535..7f6fbfcdf 100644 --- a//govcloud-us/latest/UserGuide/govcloud-robomaker.md +++ b//govcloud-us/latest/UserGuide/govcloud-robomaker.md @@ -99,60 +98,0 @@ When you create a simulation job, it must have an IAM role with the permissions -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Action": "s3:ListBucket", - "Resource": [ - "arn:aws:s3:::amzn-s3-demo-source-bucket" - ], - "Effect": "Allow" - }, - { - "Action": [ - "s3:Get*", - "s3:List*" - ], - "Resource": [ - "arn:aws:s3:::amzn-s3-demo-source-bucket/*" - ], - "Effect": "Allow" - }, - { - "Action": "s3:Put*", - "Resource": [ - "arn:aws:s3:::amzn-s3-demo-destination-bucket/*" - ], - "Effect": "Allow" - }, - { - "Action": [ - "logs:CreateLogGroup", - "logs:CreateLogStream", - "logs:PutLogEvents", - "logs:DescribeLogStreams" - ], - "Resource": [ - "arn:aws:logs:*:111122223333:log-group:/aws/robomaker/SimulationJobs*" - ], - "Effect": "Allow" - }, - { - "Action": [ - "ecr:BatchGetImage", - "ecr:GetAuthorizationToken", - "ecr:BatchCheckLayerAvailability", - "ecr:GetDownloadUrlForLayer" - ], - "Resource": "arn:aws:us-east-1:account#:repository/repository_name", - "Effect": "Allow" - } - ] - } - - @@ -161,26 +100,0 @@ The policy must be attached to a role with the following trust policy. -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": { - "Effect": "Allow", - "Principal": { "Service": "robomaker.amazonaws.com" }, - "Action": "sts:AssumeRole", - "Condition": { - "StringEquals": { - "aws:SourceAccount": "account#" // Account where the simulation job resource is created - }, - "StringEquals": { - "aws:SourceArn": "arn:aws:robomaker:region:account#:simulation-job/*" - } - } - } - } - - -