AWS opsworks documentation change
Summary
Removed example JSON configurations for IAM service roles and instance profiles
Security assessment
Removal of example role configurations reduces documentation clarity but doesn't directly address security vulnerabilities. The content was demonstrating standard role setup rather than specific security controls.
Diff
diff --git a/opsworks/latest/userguide/gettingstarted-opscm-create.md b/opsworks/latest/userguide/gettingstarted-opscm-create.md index f8e8b0902..08d1bb9dd 100644 --- a//opsworks/latest/userguide/gettingstarted-opscm-create.md +++ b//opsworks/latest/userguide/gettingstarted-opscm-create.md @@ -115,46 +114,0 @@ In the results of the `list-roles` command, look for service role ARN entries th -JSON - - -**** - - - { - "AssumeRolePolicyDocument": { - "Version": "2012-10-17", - "Statement": [ - { - "Action": "sts:AssumeRole", - "Effect": "Allow", - "Principal": { - "Service": "ec2.amazonaws.com" - } - } - ] - }, - "RoleId": "AROZZZZZZZZZZQG6R22HC", - "CreateDate": "2018-01-05T20:42:20Z", - "RoleName": "aws-opsworks-cm-ec2-role", - "Path": "/service-role/", - "Arn": "arn:aws:iam::000000000000:role/service-role/aws-opsworks-cm-ec2-role" - }, - { - "AssumeRolePolicyDocument": { - "Version": "2012-10-17", - "Statement": [ - { - "Action": "sts:AssumeRole", - "Effect": "Allow", - "Principal": { - "Service": "opsworks-cm.amazonaws.com" - } - } - ] - }, - "RoleId": "AROZZZZZZZZZZZZZZZ6QE", - "CreateDate": "2018-01-05T20:42:20Z", - "RoleName": "aws-opsworks-cm-service-role", - "Path": "/service-role/", - "Arn": "arn:aws:iam::000000000000:role/service-role/aws-opsworks-cm-service-role" - } - - @@ -167,36 +120,0 @@ In the results of the `list-instance-profiles` command, look for instance profil -JSON - - -**** - - - { - "Path": "/", - "InstanceProfileName": "aws-opsworks-cm-ec2-role", - "InstanceProfileId": "EXAMPLEDC6UR3LTUW7VHK", - "Arn": "arn:aws:iam::123456789012:instance-profile/aws-opsworks-cm-ec2-role", - "CreateDate": "2017-01-05T20:42:20Z", - "Roles": [ - { - "Path": "/service-role/", - "RoleName": "aws-opsworks-cm-ec2-role", - "RoleId": "EXAMPLEE4STNUQG6R22HC", - "Arn": "arn:aws:iam::123456789012:role/service-role/aws-opsworks-cm-ec2-role", - "CreateDate": "2017-01-05T20:42:20Z", - "AssumeRolePolicyDocument": { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": "ec2.amazonaws.com" - }, - "Action": "sts:AssumeRole" - } - ] - } - } - ] - }, - -