AWS opsworks documentation change
Summary
Removed example JSON configurations for IAM service roles and instance profiles
Security assessment
Removal of standard IAM role examples impacts documentation completeness but doesn't indicate security fixes. The examples were general role configurations without explicit security controls.
Diff
diff --git a/opsworks/latest/userguide/gettingstarted-opspup-create.md b/opsworks/latest/userguide/gettingstarted-opspup-create.md index ce1341bad..39cd13916 100644 --- a//opsworks/latest/userguide/gettingstarted-opspup-create.md +++ b//opsworks/latest/userguide/gettingstarted-opspup-create.md @@ -101,46 +100,0 @@ In the results of the `list-roles` command, look for service role ARN entries th -JSON - - -**** - - - { - "AssumeRolePolicyDocument": { - "Version": "2012-10-17", - "Statement": [ - { - "Action": "sts:AssumeRole", - "Effect": "Allow", - "Principal": { - "Service": "ec2.amazonaws.com" - } - } - ] - }, - "RoleId": "AROZZZZZZZZZZQG6R22HC", - "CreateDate": "2018-01-05T20:42:20Z", - "RoleName": "aws-opsworks-cm-ec2-role", - "Path": "/service-role/", - "Arn": "arn:aws:iam::000000000000:role/service-role/aws-opsworks-cm-ec2-role" - }, - { - "AssumeRolePolicyDocument": { - "Version": "2012-10-17", - "Statement": [ - { - "Action": "sts:AssumeRole", - "Effect": "Allow", - "Principal": { - "Service": "opsworks-cm.amazonaws.com" - } - } - ] - }, - "RoleId": "AROZZZZZZZZZZZZZZZ6QE", - "CreateDate": "2018-01-05T20:42:20Z", - "RoleName": "aws-opsworks-cm-service-role", - "Path": "/service-role/", - "Arn": "arn:aws:iam::000000000000:role/service-role/aws-opsworks-cm-service-role" - } - - @@ -153,36 +106,0 @@ In the results of the `list-instance-profiles` command, look for instance profil -JSON - - -**** - - - { - "Path": "/", - "InstanceProfileName": "aws-opsworks-cm-ec2-role", - "InstanceProfileId": "EXAMPLEDC6UR3LTUW7VHK", - "Arn": "arn:aws:iam::123456789012:instance-profile/aws-opsworks-cm-ec2-role", - "CreateDate": "2017-01-05T20:42:20Z", - "Roles": [ - { - "Path": "/service-role/", - "RoleName": "aws-opsworks-cm-ec2-role", - "RoleId": "EXAMPLEE4STNUQG6R22HC", - "Arn": "arn:aws:iam::123456789012:role/service-role/aws-opsworks-cm-ec2-role", - "CreateDate": "2017-01-05T20:42:20Z", - "AssumeRolePolicyDocument": { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": "ec2.amazonaws.com" - }, - "Action": "sts:AssumeRole" - } - ] - } - } - ] - }, - -