AWS codeartifact documentation change
Summary
Updated resource ARNs with specific region/account details, added JSON formatting sections, and fixed policy syntax
Security assessment
Changes improve accuracy of policy examples by adding regional specificity and proper formatting, enhancing security documentation quality without addressing specific vulnerabilities
Diff
diff --git a/codeartifact/latest/ug/repo-policies.md b/codeartifact/latest/ug/repo-policies.md index 3955a8cd7..9495634b8 100644 --- a//codeartifact/latest/ug/repo-policies.md +++ b//codeartifact/latest/ug/repo-policies.md @@ -16,0 +17,6 @@ A resource policy is a text file in JSON format. The file must specify a princip +JSON + + +**** + + @@ -41,0 +49,6 @@ Because the only action specified in the repository is `ReadFromRepository`, use +JSON + + +**** + + @@ -103,0 +118,6 @@ Sample output: +JSON + + +**** + + @@ -142,0 +164,6 @@ When you specify the root user of an account as the principal in a policy docume +JSON + + +**** + + @@ -178,0 +207,6 @@ The following policy grants account `123456789012` permission to publish version +JSON + + +**** + + @@ -191 +225 @@ The following policy grants account `123456789012` permission to publish version - "Resource": "arn:aws:codeartifact:region-id:111122223333:package/my_domain/my_repo/npm/parity/ui" + "Resource": "arn:aws:codeartifact:us-east-1:111122223333:package/my_domain/my_repo/npm/parity/ui" @@ -212,0 +248,6 @@ You can use wildcards to grant write permission for all packages in a repository +JSON + + +**** + + @@ -225 +266 @@ You can use wildcards to grant write permission for all packages in a repository - "Resource": "arn:aws:codeartifact:region-id:111122223333:package/my_domain/my_repo/*" + "Resource": "arn:aws:codeartifact:us-east-1:111122223333:package/my_domain/my_repo/*"