AWS codecatalyst documentation change
Summary
Updated documentation to use 'CloudFormation' instead of 'AWS CloudFormation' throughout the file for consistency
Security assessment
The changes are purely terminological updates to service names without altering security policies, permissions, or security recommendations. No evidence of addressing vulnerabilities or security incidents.
Diff
diff --git a/codecatalyst/latest/userguide/ipa-iam-roles.md b/codecatalyst/latest/userguide/ipa-iam-roles.md index 9b48bcf91..ce8c4534f 100644 --- a//codecatalyst/latest/userguide/ipa-iam-roles.md +++ b//codecatalyst/latest/userguide/ipa-iam-roles.md @@ -163 +163 @@ This section details IAM roles and policies that you can create to use with your -For CodeCatalyst workflow build actions, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can create an IAM role named **CodeCatalystBuildRoleforS3Access**. This role uses a policy with scoped permissions that CodeCatalyst needs to run tasks on AWS CloudFormation resources in your AWS account. +For CodeCatalyst workflow build actions, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can create an IAM role named **CodeCatalystBuildRoleforS3Access**. This role uses a policy with scoped permissions that CodeCatalyst needs to run tasks on CloudFormation resources in your AWS account. @@ -169 +169 @@ This role gives permissions to do the following: - * Support building of resources with AWS CloudFormation. This requires Amazon S3 access. + * Support building of resources with CloudFormation. This requires Amazon S3 access. @@ -183 +183 @@ The first time the role is used to run workflow actions, use the wildcard in the -### CodeCatalyst build role for AWS CloudFormation +### CodeCatalyst build role for CloudFormation @@ -185 +185 @@ The first time the role is used to run workflow actions, use the wildcard in the -For CodeCatalyst workflow build actions, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can create an IAM role with the necessary permissions. This role uses a policy with scoped permissions that CodeCatalyst needs to run tasks on AWS CloudFormation resources in your AWS account. +For CodeCatalyst workflow build actions, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can create an IAM role with the necessary permissions. This role uses a policy with scoped permissions that CodeCatalyst needs to run tasks on CloudFormation resources in your AWS account. @@ -189 +189 @@ This role gives permissions to do the following: - * Support building of resources with AWS CloudFormation. This is required along with the CodeCatalyst build role for Amazon S3 access and the CodeCatalyst deploy role for AWS CloudFormation. + * Support building of resources with CloudFormation. This is required along with the CodeCatalyst build role for Amazon S3 access and the CodeCatalyst deploy role for CloudFormation. @@ -211 +211 @@ The following AWS managed policies should be attached to this role: -For CodeCatalyst workflows that run CDK build actions, such as Modern three-tier web application, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can create an IAM role with the necessary permissions. This role uses a policy with scoped permissions that CodeCatalyst needs to bootstrap and run CDK build commands for AWS CloudFormation resources in your AWS account. +For CodeCatalyst workflows that run CDK build actions, such as Modern three-tier web application, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can create an IAM role with the necessary permissions. This role uses a policy with scoped permissions that CodeCatalyst needs to bootstrap and run CDK build commands for CloudFormation resources in your AWS account. @@ -217 +217 @@ This role gives permissions to do the following: - * Support building of CDK constructs and AWS CloudFormation resource stacks. This requires access to Amazon S3 for artifact storage, Amazon ECR for image repository support, and SSM for system governance and monitoring for virtual instances. + * Support building of CDK constructs and CloudFormation resource stacks. This requires access to Amazon S3 for artifact storage, Amazon ECR for image repository support, and SSM for system governance and monitoring for virtual instances. @@ -231 +231 @@ The first time the role is used to run workflow actions, use the wildcard in the -### CodeCatalyst deploy role for AWS CloudFormation +### CodeCatalyst deploy role for CloudFormation @@ -233 +233 @@ The first time the role is used to run workflow actions, use the wildcard in the -For CodeCatalyst workflow deploy actions that use AWS CloudFormation, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can use a policy with scoped permissions that CodeCatalyst needs to run tasks on AWS CloudFormation resources in your AWS account. +For CodeCatalyst workflow deploy actions that use CloudFormation, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can use a policy with scoped permissions that CodeCatalyst needs to run tasks on CloudFormation resources in your AWS account. @@ -237 +237 @@ This role gives permissions to do the following: - * Allow CodeCatalyst to invoke a Λ function to perform blue/green deployment through AWS CloudFormation. + * Allow CodeCatalyst to invoke a Λ function to perform blue/green deployment through CloudFormation. @@ -239 +239 @@ This role gives permissions to do the following: - * Allow CodeCatalyst to create and update stacks and changesets in AWS CloudFormation. + * Allow CodeCatalyst to create and update stacks and changesets in CloudFormation. @@ -457 +457 @@ The first time the role is used to run workflow actions, use the wildcard in the -For CodeCatalyst workflow actions, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can create an IAM role with the necessary permissions. This role uses a policy with scoped permissions that CodeCatalyst needs to run tasks on AWS SAM and AWS CloudFormation resources in your AWS account. +For CodeCatalyst workflow actions, you can use the default **CodeCatalystWorkflowDevelopmentRole-`spaceName`** service role, or you can create an IAM role with the necessary permissions. This role uses a policy with scoped permissions that CodeCatalyst needs to run tasks on AWS SAM and CloudFormation resources in your AWS account. @@ -463 +463 @@ This role gives permissions to do the following: - * Allow CodeCatalyst to create and update stacks and changesets in AWS CloudFormation. + * Allow CodeCatalyst to create and update stacks and changesets in CloudFormation. @@ -735 +735 @@ You don't have to create a stack role, although doing so is recommended for secu -If you're unsure which policies to add, you can omit them for now. When you test the action, if you don't have the right permissions, AWS CloudFormation generates errors that show which permissions you need to add. +If you're unsure which policies to add, you can omit them for now. When you test the action, if you don't have the right permissions, CloudFormation generates errors that show which permissions you need to add. @@ -762 +762 @@ If you're unsure which policies to add, you can omit them for now. When you test -You can choose to create and use AWS CloudFormation templates to create the policies and roles you need to access resources in an AWS account for your CodeCatalyst projects and workflows. AWS CloudFormation is a service that helps you model and set up your AWS resources so that you can spend less time managing those resources and more time focusing on your applications that run on AWS. If you intend to create roles in multiple AWS accounts, creating a template can help you perform this task more quickly. +You can choose to create and use AWS CloudFormation templates to create the policies and roles you need to access resources in an AWS account for your CodeCatalyst projects and workflows. CloudFormation is a service that helps you model and set up your AWS resources so that you can spend less time managing those resources and more time focusing on your applications that run on AWS. If you intend to create roles in multiple AWS accounts, creating a template can help you perform this task more quickly.