AWS deadline-cloud medium security documentation change

Service: deadline-cloud · 2025-10-01 · Security-related medium

File: deadline-cloud/latest/developerguide/manage-access-windows-secrets.md

Summary

Added Secrets Manager resource policy JSON examples for fleet access

Security assessment

Explicitly documents required IAM policies for secure secrets access. Adds security-critical permissions configuration (secretsmanager:GetSecretValue) for Windows credential management, preventing potential access failures.

Diff

diff --git a/deadline-cloud/latest/developerguide/manage-access-windows-secrets.md b/deadline-cloud/latest/developerguide/manage-access-windows-secrets.md
index c8ce17fd9..1e07f9114 100644
--- a//deadline-cloud/latest/developerguide/manage-access-windows-secrets.md
+++ b//deadline-cloud/latest/developerguide/manage-access-windows-secrets.md
@@ -38,0 +39,17 @@ Deadline Cloud fleets require access to the `jobRunAsUser` password stored in th
+                           {
+      "Version" : "2012-10-17", 		 	 	 
+      "Statement" : [
+        {
+          "Effect" : "Allow",
+          "Principal" : {
+            "AWS" : "FLEET_ROLE_ARN"
+          },
+          "Action": [
+            "secretsmanager:GetSecretValue"
+          ],
+          "Resource" : "*"
+        }
+      ]
+    }
+                   
+
@@ -51,0 +69,17 @@ When a fleet no longer requires access to a queue, remove access to the password
+                           {
+      "Version" : "2012-10-17", 		 	 	 
+      "Statement" : [
+        {
+          "Effect" : "Allow",
+          "Principal" : {
+            "AWS" : "FLEET_ROLE_ARN"
+          },
+          "Action": [
+            "secretsmanager:GetSecretValue"
+          ],
+          "Resource" : "*"
+        }
+      ]
+    }
+                   
+