AWS imagebuilder documentation change
Summary
Restructured IAM documentation with role-based guidance (service user, service admin, IAM admin) and added explicit links to troubleshooting/policy examples
Security assessment
The changes improve security documentation clarity by explicitly mapping IAM guidance to different user roles and adding references to policy examples/troubleshooting. While security-related (IAM permissions), there is no evidence this addresses a specific vulnerability or weakness.
Diff
diff --git a/imagebuilder/latest/userguide/security-iam.md b/imagebuilder/latest/userguide/security-iam.md index 11af421d6..412971ca7 100644 --- a//imagebuilder/latest/userguide/security-iam.md +++ b//imagebuilder/latest/userguide/security-iam.md @@ -34 +34,7 @@ AudienceAuthenticating with identitiesResource-Based Policies -How you use AWS Identity and Access Management (IAM) differs, depending on the work that you do in Image Builder. +How you use AWS Identity and Access Management (IAM) differs based on your role: + + * **Service user** \- request permissions from your administrator if you cannot access features (see [Troubleshoot IAM issues in Image Builder](./security_iam_troubleshoot.html)) + + * **Service administrator** \- determine user access and submit permission requests (see [How Image Builder works with IAM policies and roles](./security_iam_service-with-iam.html)) + + * **IAM administrator** \- write policies to manage access (see [Image Builder identity-based policies](./security_iam_service-with-iam.html#security_iam_id-based-policy-examples)) @@ -36 +41,0 @@ How you use AWS Identity and Access Management (IAM) differs, depending on the w -**Service user** – If you use the Image Builder service to do your job, then your administrator provides you with the credentials and permissions that you need. As you use more Image Builder features to do your work, you might need additional permissions. Understanding how access is managed can help you request the right permissions from your administrator. If you cannot access a feature in Image Builder, see [Troubleshoot IAM issues in Image Builder](./security_iam_troubleshoot.html). @@ -38 +42,0 @@ How you use AWS Identity and Access Management (IAM) differs, depending on the w -**Service administrator** – If you're in charge of Image Builder resources at your company, you probably have full access to Image Builder. It's your job to determine which Image Builder features and resources your service users should access. You must then submit requests to your IAM administrator to change the permissions of your service users. Review the information on this page to understand the basic concepts of IAM. To learn more about how your company can use IAM with Image Builder, see [How Image Builder works with IAM policies and roles](./security_iam_service-with-iam.html). @@ -40 +43,0 @@ How you use AWS Identity and Access Management (IAM) differs, depending on the w -**IAM administrator** – If you're an IAM administrator, you might want to learn details about how you can write policies to manage access to Image Builder. To view example Image Builder identity-based policies that you can use in IAM, see [Image Builder identity-based policies](./security_iam_service-with-iam.html#security_iam_id-based-policy-examples).