AWS vpc documentation change
Summary
Renamed 'Required IAM permissions' section to 'IAM role for Infoblox', restructured IAM permissions list, and added a note about potential additional permissions for VPC IPAM discovery.
Security assessment
The change clarifies IAM role requirements for Infoblox integration but doesn't address a specific vulnerability. It improves security documentation by emphasizing least-privilege permissions and role-based access.
Diff
diff --git a/vpc/latest/ipam/integrate-infoblox-ipam.md b/vpc/latest/ipam/integrate-infoblox-ipam.md index 764fe774c..6a9a1ba46 100644 --- a//vpc/latest/ipam/integrate-infoblox-ipam.md +++ b//vpc/latest/ipam/integrate-infoblox-ipam.md @@ -5 +5 @@ -Integration process overviewWhen to use this integrationPrerequisitesRequired IAM permissionsConfigure Infoblox integration in the VPC IPAMNext steps +Integration process overviewWhen to use this integrationPrerequisitesIAM role for InfobloxConfigure Infoblox integration in the VPC IPAMNext steps @@ -47 +47 @@ Before configuring this integration, ensure you have: -## Required IAM permissions +## IAM role for Infoblox @@ -49 +49,3 @@ Before configuring this integration, ensure you have: -To use this feature, you need the following IAM permissions: +Create an IAM role for the Infoblox principal to assume, or use an existing role. The role needs these permissions: + + * `ec2:DescribeIpamPools` @@ -55,4 +56,0 @@ To use this feature, you need the following IAM permissions: - * `ec2:DescribeIpamPools` - - * `ec2:GetIpamResourceCidrs` - @@ -62,0 +61,2 @@ To use this feature, you need the following IAM permissions: + * `ec2:GetIpamResourceCidrs` + @@ -67,0 +68,4 @@ For instructions on how to add these permissions to an IAM role or policy, see [ +###### Note + +Infoblox may require permissions for VPC IPAM discovery in addition to these permissions required to enable this integration. +