AWS proton documentation change
Summary
Added end of support notice and removed JSON policy example
Security assessment
Policy example removal could impact documentation completeness but shows no direct security issue
Diff
diff --git a/proton/latest/userguide/using-service-linked-roles-codebuild.md b/proton/latest/userguide/using-service-linked-roles-codebuild.md index 2b1c90725..629992ed7 100644 --- a//proton/latest/userguide/using-service-linked-roles-codebuild.md +++ b//proton/latest/userguide/using-service-linked-roles-codebuild.md @@ -6,0 +7,2 @@ Service-linked role permissions for AWS ProtonCreating a service-linked role for +End of support notice: On October 7, 2026, AWS will end support for AWS Proton. After October 7, 2026, you will no longer be able to access the AWS Proton console or AWS Proton resources. Your deployed infrastructure will remain intact. For more information, see [AWS Proton Service Deprecation and Migration Guide](https://docs.aws.amazon.com/proton/latest/userguide/proton-end-of-support.html). + @@ -39,60 +40,0 @@ This policy includes the following permissions: - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "CloudFormationPermissions", - "Effect": "Allow", - "Action": [ - "cloudformation:CreateStack", - "cloudformation:CreateChangeSet", - "cloudformation:DeleteChangeSet", - "cloudformation:DeleteStack", - "cloudformation:UpdateStack", - "cloudformation:DescribeStacks", - "cloudformation:DescribeStackEvents", - "cloudformation:ListStackResources", - "cloudformation:TagResource", - "cloudformation:UntagResource" - ], - "Resource": [ - "arn:aws:cloudformation:*:*:stack/AWSProton-CodeBuild-*" - ] - }, - { - "Sid": "CodeBuildPermissions", - "Effect": "Allow", - "Action": [ - "codebuild:CreateProject", - "codebuild:DeleteProject", - "codebuild:UpdateProject", - "codebuild:StartBuild", - "codebuild:StopBuild", - "codebuild:RetryBuild", - "codebuild:BatchGetBuilds", - "codebuild:BatchGetProjects" - ], - "Resource": "arn:aws:codebuild:*:*:project/AWSProton*" - }, - { - "Sid": "PassRolePermissions", - "Effect": "Allow", - "Action": "iam:PassRole", - "Resource": "*", - "Condition": { - "StringEqualsIfExists": { - "iam:PassedToService": "codebuild.amazonaws.com" - } - } - }, - { - "Sid": "ServiceQuotaPermissions", - "Effect": "Allow", - "Action": [ - "servicequotas:GetServiceQuota" - ], - "Resource": "*" - } - ] - } -