AWS Security ChangesHomeSearch

AWS app2container documentation change

Service: app2container · 2025-10-10 · Documentation low

File: app2container/latest/UserGuide/iam-a2c.md

Summary

Updated IAM policy examples by removing angle brackets from placeholder values and added service deprecation notice

Security assessment

The changes primarily fix documentation formatting by removing angle brackets from placeholder ARNs. While proper IAM policy documentation is security-relevant, these changes don't introduce new security controls or address specific vulnerabilities. The deprecation notice is product lifecycle information.

Diff

diff --git a/app2container/latest/UserGuide/iam-a2c.md b/app2container/latest/UserGuide/iam-a2c.md
index 5cfb73254..ccadf6703 100644
--- a//app2container/latest/UserGuide/iam-a2c.md
+++ b//app2container/latest/UserGuide/iam-a2c.md
@@ -7 +7 @@ Create IAM resources for general useCreate IAM resources for deployment
-NEW - You can now accelerate your migration and modernization with AWS Transform. Read [Getting Started](https://docs.aws.amazon.com/transform/latest/userguide/getting-started.html) in the _AWS Transform User Guide_.
+AWS .NET Modernization Tools Porting Assistant (PA) for .NET, AWS App2Container (A2C), AWS Toolkit for .NET Refactoring (TR), and AWS Microservice Extractor (ME) for .NET will no longer be open to new customers starting on November 7, 2025. If you would like to use the service, sign up prior to November 7, 2025. Alternatively use [AWS Transform](https://aws.amazon.com/transform/), which is an agentic AI service developed to accelerate enterprise modernization of .NET.
@@ -169 +169 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<amzn-s3-demo-bucket-ARN>" 
+                "Resource": "amzn-s3-demo-bucket-ARN" 
@@ -202 +202 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<resource-ARNs>" 
+                "Resource": "resource-ARNs" 
@@ -236 +236 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<resource-ARNs>" 
+                "Resource": "resource-ARNs" 
@@ -242 +242 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<ARN for ecsTaskExecutionRole>" 
+                "Resource": "ARN for ecsTaskExecutionRole" 
@@ -261 +261 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<resource-ARNs>" 
+                "Resource": "resource-ARNs" 
@@ -271 +271 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:iam::<your account ID>:role/A2CEcsFirelensRole"
+                "Resource": "arn:aws:iam::your account ID:role/A2CEcsFirelensRole"
@@ -279 +279 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:iam::<your account ID>:policy/service-role/A2CEcsFirelensPolicy"
+                "Resource": "arn:aws:iam::your account ID:policy/service-role/A2CEcsFirelensPolicy"
@@ -288 +288 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:iam::<your account ID>:policy/*a2c-KinesisFirehosePolicy-*"
+                "Resource": "arn:aws:iam::your account ID:policy/*a2c-KinesisFirehosePolicy-*"
@@ -298 +298 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:iam::<your account ID>:role/*a2c-FirehoseRole-*"
+                "Resource": "arn:aws:iam::your account ID:role/*a2c-FirehoseRole-*"
@@ -307 +307 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:firehose:*:<your account ID>:deliverystream/*"
+                "Resource": "arn:aws:firehose:*:your account ID:deliverystream/*"
@@ -315 +315 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:kinesis:*:<your account ID>:stream/*"
+                "Resource": "arn:aws:kinesis:*:your account ID:stream/*"
@@ -338 +338 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<resource-ARNs>"
+                "Resource": "resource-ARNs"
@@ -348 +348 @@ Other policy sections in the examples are required for App2Container to generate
-              "Resource": "<resource-ARNs>"
+              "Resource": "resource-ARNs"
@@ -369 +369 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:secretsmanager:<your region>:<your account ID>:secret:a2c/*"
+                "Resource": "arn:aws:secretsmanager:your region:your account ID:secret:a2c/*"
@@ -377 +377 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:cloudformation:*:<your account ID>:stack/a2c-*"
+                "Resource": "arn:aws:cloudformation:*:your account ID:stack/a2c-*"
@@ -401 +401 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<amzn-s3-demo-bucket-ARN>" 
+                "Resource": "amzn-s3-demo-bucket-ARN" 
@@ -433 +433 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<resource-ARNs>" 
+                "Resource": "resource-ARNs" 
@@ -452 +452 @@ Other policy sections in the examples are required for App2Container to generate
-                    "arn:aws:lambda:<target Region>:*:function:eks-quickstart-ResourceReader"
+                    "arn:aws:lambda:target Region:*:function:eks-quickstart-ResourceReader"
@@ -476 +476 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<resource-ARNs>"
+                "Resource": "resource-ARNs"
@@ -486 +486 @@ Other policy sections in the examples are required for App2Container to generate
-              "Resource": "<resource-ARNs>"
+              "Resource": "resource-ARNs"
@@ -507 +507 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:secretsmanager:<your region>:<your account ID>:secret:a2c/*"
+                "Resource": "arn:aws:secretsmanager:your region:your account ID:secret:a2c/*"
@@ -519 +519 @@ Other policy sections in the examples are required for App2Container to generate
-    			"Resource": "<resource-ARNs>"
+    			"Resource": "resource-ARNs"
@@ -527 +527 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:cloudformation:*:<your account ID>:stack/a2c-*"
+                "Resource": "arn:aws:cloudformation:*:your account ID:stack/a2c-*"
@@ -544 +544 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<resource-ARNs>"
+                "Resource": "resource-ARNs"
@@ -567 +567 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "<resource-ARNs>"
+                "Resource": "resource-ARNs"
@@ -616 +616 @@ Other policy sections in the examples are required for App2Container to generate
-                "Resource": "arn:aws:cloudformation:*:<your account ID>:stack/a2c-*"
+                "Resource": "arn:aws:cloudformation:*:your account ID:stack/a2c-*"