AWS signer documentation change
Summary
Added JSON section markers and fixed ARN formatting in policy examples
Security assessment
Formatting improvements and ARN syntax standardization in existing policies. No new security controls or vulnerability mitigations introduced.
Diff
diff --git a/signer/latest/developerguide/authen-inlinepolicies.md b/signer/latest/developerguide/authen-inlinepolicies.md index c6116d80b..da68f8940 100644 --- a//signer/latest/developerguide/authen-inlinepolicies.md +++ b//signer/latest/developerguide/authen-inlinepolicies.md @@ -50,0 +51,6 @@ The following policies allow a principal to discover every `SigningProfile` with +JSON + + +**** + + @@ -70,0 +78,6 @@ The following policies allow a principal to discover every `SigningProfile` with +JSON + + +**** + + @@ -95,0 +110,6 @@ The following policies allow a principal to call `GetSigningProfile` and `StartS +JSON + + +**** + + @@ -106 +126 @@ The following policies allow a principal to call `GetSigningProfile` and `StartS - "Resource":"arn:aws:signer:Region:444455556666:/signing-profiles/MySigningProfile" + "Resource": "arn:aws:signer:us-east-1:444455556666:/signing-profiles/MySigningProfile" @@ -121,0 +143,6 @@ The following policies allow a principal to call `GetSigningProfile` and `StartS +JSON + + +**** + + @@ -132 +159 @@ The following policies allow a principal to call `GetSigningProfile` and `StartS - "Resource":"arn:aws:signer:Region:444455556666:/signing-profiles/MySigningProfile" + "Resource": "arn:aws:signer:us-east-1:444455556666:/signing-profiles/MySigningProfile" @@ -149,0 +178,6 @@ The following policy allows a principal to call `GetSigningProfile` and `StartSi +JSON + + +**** + + @@ -160 +194 @@ The following policy allows a principal to call `GetSigningProfile` and `StartSi - "Resource":"arn:aws:signer:Region:444455556666:/signing-profiles/MySigningProfile", + "Resource": "arn:aws:signer:us-east-1:444455556666:/signing-profiles/MySigningProfile", @@ -182,0 +218,6 @@ The following policy allows a principal to perform any AWS Signer action. +JSON + + +**** + +