AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-09-10 · Documentation low

File: AWSCloudFormation/latest/UserGuide/git-sync-prereq.md

Summary

Added detailed IAM policy example for CodeConnections and CloudFormation access

Security assessment

Provides security-related IAM policy configuration but does not address a specific vulnerability

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/git-sync-prereq.md b/AWSCloudFormation/latest/UserGuide/git-sync-prereq.md
index cb72fedc8..528832b4f 100644
--- a//AWSCloudFormation/latest/UserGuide/git-sync-prereq.md
+++ b//AWSCloudFormation/latest/UserGuide/git-sync-prereq.md
@@ -268,0 +269,55 @@ The following example IAM policy includes the user permissions needed to set up
+JSON
+    
+
+****
+    
+    
+    
+    {
+        "Version": "2012-10-17",
+        "Statement": [
+            {
+                "Sid": "CodeConnectionsPermissions",
+                "Effect": "Allow",
+                "Action": [
+                    "codeconnections:CreateRepositoryLink",
+                    "codeconnections:CreateSyncConfiguration",
+                    "codeconnections:DeleteRepositoryLink",
+                    "codeconnections:DeleteSyncConfiguration",
+                    "codeconnections:GetRepositoryLink",
+                    "codeconnections:GetSyncConfiguration",
+                    "codeconnections:ListRepositoryLinks",
+                    "codeconnections:ListSyncConfigurations",
+                    "codeconnections:ListTagsForResource",
+                    "codeconnections:TagResource",
+                    "codeconnections:UntagResource",
+                    "codeconnections:UpdateRepositoryLink",
+                    "codeconnections:UpdateSyncBlocker",
+                    "codeconnections:UpdateSyncConfiguration",
+                    "codeconnections:UseConnection",
+                    "codeconnections:CreateForcedTargetSync",
+                    "codeconnections:CreatePullRequestForResource"
+                ],
+                "Resource": "*"
+            },
+            {
+                "Sid": "CloudFormationConsolePermissions",
+                "Effect": "Allow",
+                "Action": [
+                    "cloudformation:CreateChangeSet",
+                    "cloudformation:DeleteChangeSet",
+                    "cloudformation:DescribeChangeSet",
+                    "cloudformation:DescribeStackEvents",
+                    "cloudformation:DescribeStacks",
+                    "cloudformation:ExecuteChangeSet",
+                    "cloudformation:GetTemplate",
+                    "cloudformation:ListChangeSets",
+                    "cloudformation:ListStacks",
+                    "cloudformation:ValidateTemplate"
+                ],
+                "Resource": "*"
+            }
+        ]
+    }
+    
+