AWS proton documentation change
Summary
Changed 'AWS CloudFormation' to 'CloudFormation' in IaaC tools description
Security assessment
Terminology adjustment without modifying security content. The existing security best practice advice about least-privilege policies remains unaffected.
Diff
diff --git a/proton/latest/userguide/ag-env-codebuild-provisioning-role-creation.md b/proton/latest/userguide/ag-env-codebuild-provisioning-role-creation.md index e4fa1dae9..71e4492c0 100644 --- a//proton/latest/userguide/ag-env-codebuild-provisioning-role-creation.md +++ b//proton/latest/userguide/ag-env-codebuild-provisioning-role-creation.md @@ -9 +9 @@ End of support notice: On October 7, 2026, AWS will end support for AWS Proton. -Infrastructure as a Code (IaaC) tools like AWS CloudFormation and Terraform require permissions for the many different types of AWS resources. For example, if an IaaC template declares an Amazon S3 bucket, it needs permissions to create, read, update, and delete Amazon S3 buckets. It's considered a security best practice to limit roles to the minimal permissions required. Given the breadth of AWS resources, it’s challenging to create least-privilege policies for IaaC templates, especially when the resources being managed by those templates can change later. For example, in your latest edits to a template being managed by AWS Proton, you add an RDS database resource. +Infrastructure as a Code (IaaC) tools like CloudFormation and Terraform require permissions for the many different types of AWS resources. For example, if an IaaC template declares an Amazon S3 bucket, it needs permissions to create, read, update, and delete Amazon S3 buckets. It's considered a security best practice to limit roles to the minimal permissions required. Given the breadth of AWS resources, it’s challenging to create least-privilege policies for IaaC templates, especially when the resources being managed by those templates can change later. For example, in your latest edits to a template being managed by AWS Proton, you add an RDS database resource.