AWS glue documentation change
Summary
Updated references from 'AWS CloudFormation' to 'CloudFormation' in policy documentation
Security assessment
Consistency update to service naming conventions. No changes to actual policy permissions or security guidance.
Diff
diff --git a/glue/latest/dg/attach-policy-iam-user.md b/glue/latest/dg/attach-policy-iam-user.md index aa22a1845..586fc3c86 100644 --- a//glue/latest/dg/attach-policy-iam-user.md +++ b//glue/latest/dg/attach-policy-iam-user.md @@ -26 +26 @@ When you finish this step, your user or group has the following policies attache -You can attach an AWS managed policy or an inline policy to a user or group to access the AWS Glue console. Some of the resources specified in this policy refer to default names that are used by AWS Glue for Amazon S3 buckets, Amazon S3 ETL scripts, CloudWatch Logs, AWS CloudFormation, and Amazon EC2 resources. For simplicity, AWS Glue writes some Amazon S3 objects into buckets in your account prefixed with `aws-glue-*` by default. +You can attach an AWS managed policy or an inline policy to a user or group to access the AWS Glue console. Some of the resources specified in this policy refer to default names that are used by AWS Glue for Amazon S3 buckets, Amazon S3 ETL scripts, CloudWatch Logs, CloudFormation, and Amazon EC2 resources. For simplicity, AWS Glue writes some Amazon S3 objects into buckets in your account prefixed with `aws-glue-*` by default. @@ -236 +236 @@ The following table describes the permissions granted by this policy. -`"cloudformation:CreateStack", "cloudformation:DeleteStack"` | `"arn:aws:cloudformation:*:*:stack/ aws-glue*/*"` | Allows managing AWS CloudFormation stacks when working with notebook servers. Naming convention: AWS Glue creates stacks whose names begin with **aws-glue**. +`"cloudformation:CreateStack", "cloudformation:DeleteStack"` | `"arn:aws:cloudformation:*:*:stack/ aws-glue*/*"` | Allows managing CloudFormation stacks when working with notebook servers. Naming convention: AWS Glue creates stacks whose names begin with **aws-glue**. @@ -308 +308 @@ You can attach the **CloudWatchLogsReadOnlyAccess** policy to a user to view the -You can attach the **AWSCloudFormationReadOnlyAccess** policy to a user to view the AWS CloudFormation stacks used by AWS Glue on the AWS CloudFormation console. +You can attach the **AWSCloudFormationReadOnlyAccess** policy to a user to view the CloudFormation stacks used by AWS Glue on the CloudFormation console.