AWS codeartifact medium security documentation change

Service: codeartifact · 2025-10-25 · Security-related medium

File: codeartifact/latest/ug/delete-repo.md

Summary

Fixed IAM policy syntax (added quotes around Principal wildcard), corrected NotResource value, and added JSON formatting sections

Security assessment

Correcting Principal syntax from '*' to "*" fixes invalid policy syntax that could lead to unintended permissions. Changing NotResource from 'repository-arn' to role ARN pattern limits policy scope, reducing potential misconfiguration risks

Diff

diff --git a/codeartifact/latest/ug/delete-repo.md b/codeartifact/latest/ug/delete-repo.md
index f1f090b7e..60261344e 100644
--- a//codeartifact/latest/ug/delete-repo.md
+++ b//codeartifact/latest/ug/delete-repo.md
@@ -63,0 +64,6 @@ You can prevent a repository from being accidentally deleted by including a doma
+JSON
+    
+
+****
+    
+    
@@ -75 +81 @@ You can prevent a repository from being accidentally deleted by including a doma
-                "Principal": *
+                "Principal": "*"
@@ -83,0 +91,6 @@ This policy prevents all principals from deleting the repository, but if you dec
+JSON
+    
+
+****
+    
+    
@@ -93,2 +106,2 @@ This policy prevents all principals from deleting the repository, but if you dec
-                "NotResource": "repository-arn",
-                "Principal": *
+                "NotResource": "arn:aws:iam::*:role/Service*",
+                "Principal": "*"
@@ -104,0 +119,6 @@ Replace `repository-arn` with the ARN of the repository that you would like to d
+JSON
+    
+
+****
+    
+    
@@ -115 +135 @@ Replace `repository-arn` with the ARN of the repository that you would like to d
-                "Principal": *
+                "Principal": "*"