AWS opsworks documentation change
Summary
Removed example JSON configurations for IAM service roles
Security assessment
Removal of service role examples impacts documentation but doesn't address security vulnerabilities. The examples showed normal role setup rather than security-specific configurations.
Diff
diff --git a/opsworks/latest/userguide/opspup-create-server-cfn.md b/opsworks/latest/userguide/opspup-create-server-cfn.md index f5ead54dc..5e7804102 100644 --- a//opsworks/latest/userguide/opspup-create-server-cfn.md +++ b//opsworks/latest/userguide/opspup-create-server-cfn.md @@ -100,46 +99,0 @@ In the results of the `list-roles` command, look for service role and instance p -JSON - - -**** - - - { - "AssumeRolePolicyDocument": { - "Version": "2012-10-17", - "Statement": [ - { - "Action": "sts:AssumeRole", - "Effect": "Allow", - "Principal": { - "Service": "ec2.amazonaws.com" - } - } - ] - }, - "RoleId": "AROZZZZZZZZZZQG6R22HC", - "CreateDate": "2018-01-05T20:42:20Z", - "RoleName": "aws-opsworks-cm-ec2-role", - "Path": "/service-role/", - "Arn": "arn:aws:iam::000000000000:role/service-role/aws-opsworks-cm-ec2-role" - }, - { - "AssumeRolePolicyDocument": { - "Version": "2012-10-17", - "Statement": [ - { - "Action": "sts:AssumeRole", - "Effect": "Allow", - "Principal": { - "Service": "opsworks-cm.amazonaws.com" - } - } - ] - }, - "RoleId": "AROZZZZZZZZZZZZZZZ6QE", - "CreateDate": "2018-01-05T20:42:20Z", - "RoleName": "aws-opsworks-cm-service-role", - "Path": "/service-role/", - "Arn": "arn:aws:iam::000000000000:role/service-role/aws-opsworks-cm-service-role" - } - -