AWS proton documentation change
Summary
Removed detailed JSON policy examples for two service-linked roles
Security assessment
The removal of policy examples does not directly address a security issue. While policies relate to permissions, there is no evidence of a vulnerability being corrected here.
Diff
diff --git a/proton/latest/userguide/using-service-linked-roles-sync.md b/proton/latest/userguide/using-service-linked-roles-sync.md index c6718a6dd..7942a0af0 100644 --- a//proton/latest/userguide/using-service-linked-roles-sync.md +++ b//proton/latest/userguide/using-service-linked-roles-sync.md @@ -39,53 +38,0 @@ The role permissions policy named `AWSProtonSyncServiceRolePolicy` allows AWS Pr -This policy includes the following permissions: - -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - { - "Sid": "SyncToProton", - "Effect": "Allow", - "Action": [ - "proton:UpdateServiceTemplateVersion", - "proton:UpdateServiceTemplate", - "proton:UpdateEnvironmentTemplateVersion", - "proton:UpdateEnvironmentTemplate", - "proton:GetServiceTemplateVersion", - "proton:GetServiceTemplate", - "proton:GetEnvironmentTemplateVersion", - "proton:GetEnvironmentTemplate", - "proton:DeleteServiceTemplateVersion", - "proton:DeleteEnvironmentTemplateVersion", - "proton:CreateServiceTemplateVersion", - "proton:CreateServiceTemplate", - "proton:CreateEnvironmentTemplateVersion", - "proton:CreateEnvironmentTemplate", - "proton:ListEnvironmentTemplateVersions", - "proton:ListServiceTemplateVersions", - "proton:CreateEnvironmentTemplateMajorVersion", - "proton:CreateServiceTemplateMajorVersion" - ], - "Resource": "*" - }, - { - "Sid": "AccessGitRepos", - "Effect": "Allow", - "Action": [ - "codestar-connections:UseConnection", - "codeconnections:UseConnection" - ], - "Resource": [ - "arn:aws:codestar-connections:*:*:connection/*", - "arn:aws:codeconnections:*:*:connection/*" - ] - } - ] - } - - @@ -108,38 +54,0 @@ The role permissions policy named `AWSProtonServiceGitSyncServiceRolePolicy` all -This policy includes the following permissions: - -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - { - "Sid": "ProtonServiceSync", - "Effect": "Allow", - "Action": [ - "proton:GetService", - "proton:UpdateService", - "proton:UpdateServicePipeline", - "proton:CreateServiceInstance", - "proton:GetServiceInstance", - "proton:UpdateServiceInstance", - "proton:ListServiceInstances", - "proton:GetComponent", - "proton:CreateComponent", - "proton:ListComponents", - "proton:UpdateComponent", - "proton:GetEnvironment", - "proton:CreateEnvironment", - "proton:ListEnvironments", - "proton:UpdateEnvironment" - ], - "Resource": "*" - } - ] - } - -