AWS proton documentation change
Summary
Replaced inline policies with AWS managed policy references
Security assessment
Promotes use of AWS-managed policies which follow security best practices. While improving security documentation, no specific vulnerabilities are addressed.
Diff
diff --git a/proton/latest/userguide/security-iam-awsmanpol.md b/proton/latest/userguide/security-iam-awsmanpol.md index baf36d299..5eb5d8d23 100644 --- a//proton/latest/userguide/security-iam-awsmanpol.md +++ b//proton/latest/userguide/security-iam-awsmanpol.md @@ -87,2 +86,0 @@ The policy includes the following key action namespaces: -This policy includes the following permissions. - @@ -104,2 +101,0 @@ The policy includes the following key action namespaces: -This policy includes the following permissions. - @@ -122,0 +119,2 @@ The policy includes the following key action namespaces: +For more information, see [AWSProtonSyncServiceRolePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSProtonSyncServiceRolePolicy.html). + @@ -138,31 +136 @@ The policy includes the following key action namespaces: -This policy includes the following permissions. - -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "logs:CreateLogStream", - "logs:CreateLogGroup", - "logs:PutLogEvents" - ], - "Resource": [ - "arn:aws:logs:*:*:log-group:/aws/codebuild/AWSProton-*" - ] - }, - { - "Effect": "Allow", - "Action": "proton:NotifyResourceDeploymentStatusChange", - "Resource": "arn:aws:proton:*:*:*" - } - ] - } - +For more information, see [AWSProtonCodeBuildProvisioningBasicAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSProtonCodeBuildProvisioningBasicAccess.html). @@ -189,2 +156,0 @@ The policy includes the following key action namespaces: -This policy includes the following permissions. - @@ -205,0 +172,2 @@ The policy includes the following key action namespaces: +For more information, see [AWSProtonServiceGitSyncServiceRolePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSProtonServiceGitSyncServiceRolePolicy.html). +