AWS servicecatalog documentation change
Summary
Removed redundant JSON policy example and added section formatting
Security assessment
Formatting cleanup of existing role trust policy documentation without altering security guidance or addressing vulnerabilities.
Diff
diff --git a/servicecatalog/latest/adminguide/getstarted-launchrole-Terraform.md b/servicecatalog/latest/adminguide/getstarted-launchrole-Terraform.md index dda821df2..e29f316c5 100644 --- a//servicecatalog/latest/adminguide/getstarted-launchrole-Terraform.md +++ b//servicecatalog/latest/adminguide/getstarted-launchrole-Terraform.md @@ -39,0 +40,6 @@ Paste the following JSON policy document: +JSON + + +**** + + @@ -101,30 +107,0 @@ Paste the following JSON policy document: - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "GivePermissionsToServiceCatalog", - "Effect": "Allow", - "Principal": { - "Service": "servicecatalog.amazonaws.com" - }, - "Action": "sts:AssumeRole" - }, - { - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:iam::account_id:root" - }, - "Action": "sts:AssumeRole", - "Condition": { - "StringLike": { - "aws:PrincipalArn": [ - "arn:aws:iam::accounti_id:role/TerraformEngine/TerraformExecutionRole*", - "arn:aws:iam::accounti_id:role/TerraformEngine/ServiceCatalogExternalParameterParserRole*", - "arn:aws:iam::accounti_id:role/TerraformEngine/ServiceCatalogTerraformOSParameterParserRole*" - ] - } - } - } - ] - } -