AWS greengrass documentation change
Summary
Updated end-of-support notice and revised IAM policy examples with concrete account IDs, regions, and corrected policy version (2008-10-17 to 2012-10-17).
Security assessment
The IAM policy example corrections (e.g., valid policy version, specific ARNs) help prevent misconfigurations that could lead to insecure permissions. While not addressing a specific vulnerability, these changes improve security documentation by ensuring accurate policy syntax and conditions.
Diff
diff --git a/greengrass/v1/developerguide/bulk-deploy-cli.md b/greengrass/v1/developerguide/bulk-deploy-cli.md index 78cca2d5b..d88072d73 100644 --- a//greengrass/v1/developerguide/bulk-deploy-cli.md +++ b//greengrass/v1/developerguide/bulk-deploy-cli.md @@ -7 +7 @@ PrerequisitesCreate and upload the bulk deployment input fileCreate and configur -**AWS IoT Greengrass Version 1 entered the extended life phase on June 30, 2023. For more information, see the[AWS IoT Greengrass V1 maintenance policy](https://docs.aws.amazon.com/greengrass/v1/developerguide/maintenance-policy.html). After this date, AWS IoT Greengrass V1 won't release updates that provide features, enhancements, bug fixes, or security patches.** Devices that run on AWS IoT Greengrass V1 won't be disrupted and will continue to operate and to connect to the cloud. We strongly recommend that you [migrate to AWS IoT Greengrass Version 2](https://docs.aws.amazon.com/greengrass/v2/developerguide/move-from-v1.html), which adds [significant new features](https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-v2-whats-new.html) and [support for additional platforms](https://docs.aws.amazon.com/greengrass/v2/developerguide/operating-system-feature-support-matrix.html). +End of support notice: On October 7th, 2026, AWS will discontinue support for AWS IoT Greengrass Version 1. After October 7th, 2026, you will no longer be able to access the AWS IoT Greengrass V1 resources. For more information, please visit [Migrate from AWS IoT Greengrass Version 1](https://docs.aws.amazon.com/greengrass/v2/developerguide/migrate-from-v1.html). @@ -128,0 +129,6 @@ For more information about creating an IAM role and delegating permissions, see +JSON + + +**** + + @@ -137,4 +143,3 @@ For more information about creating an IAM role and delegating permissions, see - "arn:aws:greengrass:region:accountId:/greengrass/groups/groupId1", - "arn:aws:greengrass:region:accountId:/greengrass/groups/groupId2", - "arn:aws:greengrass:region:accountId:/greengrass/groups/groupId3", - ... + "arn:aws:greengrass:us-east-1:123456789012:/greengrass/groups/groupId1", + "arn:aws:greengrass:us-east-1:123456789012:/greengrass/groups/groupId2", + "arn:aws:greengrass:us-east-1:123456789012:/greengrass/groups/groupId3" @@ -156,0 +162,6 @@ We recommend that you also include the `aws:SourceArn` and `aws:SourceAccount` g +JSON + + +**** + + @@ -169 +180 @@ We recommend that you also include the `aws:SourceArn` and `aws:SourceAccount` g - "aws:SourceAccount": "account-id" + "aws:SourceAccount": "123456789012" @@ -172 +183 @@ We recommend that you also include the `aws:SourceArn` and `aws:SourceAccount` g - "aws:SourceArn": "arn:aws:greengrass:region:account-id:*" + "aws:SourceArn": "arn:aws:greengrass:us-east-1:123456789012:*" @@ -182,0 +195,6 @@ Use the following example to update the IAM policy attached to your execution ro +JSON + + +**** + + @@ -193,2 +211,2 @@ Use the following example to update the IAM policy attached to your execution ro - "arn:aws:iam::account-id:user/executionRoleArn" - ] + "arn:aws:iam::123456789012:user/executionRoleArn" + ], @@ -213,0 +232,6 @@ For more information, see [ How do I add an S3 bucket policy?](https://docs.aws. +JSON + + +**** + + @@ -216 +240 @@ For more information, see [ How do I add an S3 bucket policy?](https://docs.aws. - "Version": "2008-10-17", + "Version":"2012-10-17", @@ -243,0 +269,6 @@ You can directly modify your execution role to grant it permission to your Amazo +JSON + + +**** + +