AWS ARG documentation change
Summary
Updated documentation links to include double slashes in AWS documentation URLs (formatting correction)
Security assessment
The changes only modify URL paths by adding an extra slash (//IAM/ instead of /IAM/) in documentation references. This appears to be a formatting or path resolution correction rather than addressing security vulnerabilities or adding security guidance. No security-related content was added or modified beyond link formatting.
Diff
diff --git a/ARG/latest/userguide/security_iam_service-with-iam.md b/ARG/latest/userguide/security_iam_service-with-iam.md index dba0217ca..49f10841a 100644 --- a//ARG/latest/userguide/security_iam_service-with-iam.md +++ b//ARG/latest/userguide/security_iam_service-with-iam.md @@ -26 +26 @@ Before you use IAM to manage access to Resource Groups, you should understand wh -With IAM identity-based policies, you can specify allowed or denied actions and resources as well as the conditions under which actions are allowed or denied. Resource Groups supports specific actions, resources, and condition keys. To learn about all of the elements that you use in a JSON policy, see [IAM JSON Policy Elements Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_. +With IAM identity-based policies, you can specify allowed or denied actions and resources as well as the conditions under which actions are allowed or denied. Resource Groups supports specific actions, resources, and condition keys. To learn about all of the elements that you use in a JSON policy, see [IAM JSON Policy Elements Reference](https://docs.aws.amazon.com//IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_. @@ -51 +51 @@ You can specify multiple actions using wildcards (*). For example, to specify al -To see a list of Resource Groups actions, see [Actions, Resources, and Condition Keys for AWS Resource Groups](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awsresourcegroups.html) in the _IAM User Guide_. +To see a list of Resource Groups actions, see [Actions, Resources, and Condition Keys for AWS Resource Groups](https://docs.aws.amazon.com//IAM/latest/UserGuide/list_awsresourcegroups.html) in the _IAM User Guide_. @@ -67 +67 @@ The only Resource Groups resource is a _group_. The group resource has an ARN in -For more information about the format of ARNs, see [Amazon Resource Names (ARNs) and AWS Service Namespaces](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html). +For more information about the format of ARNs, see [Amazon Resource Names (ARNs) and AWS Service Namespaces](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html). @@ -92 +92 @@ Some Resource Groups API actions can involve multiple resources. For example, `D -To see a list of Resource Groups resource types and their ARNs, and learn with which actions you can specify the ARN of each resource, see [Actions, Resources, and Condition Keys for AWS Resource Groups](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awsresourcegroups.html) in the _IAM User Guide_. +To see a list of Resource Groups resource types and their ARNs, and learn with which actions you can specify the ARN of each resource, see [Actions, Resources, and Condition Keys for AWS Resource Groups](https://docs.aws.amazon.com//IAM/latest/UserGuide/list_awsresourcegroups.html) in the _IAM User Guide_. @@ -100 +100 @@ The `Condition` element specifies when statements execute based on defined crite -Resource Groups defines its own set of condition keys and also supports using some global condition keys. To see all AWS global condition keys, see [AWS Global Condition Context Keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html) in the _IAM User Guide_. +Resource Groups defines its own set of condition keys and also supports using some global condition keys. To see all AWS global condition keys, see [AWS Global Condition Context Keys](https://docs.aws.amazon.com//IAM/latest/UserGuide/reference_policies_condition-keys.html) in the _IAM User Guide_. @@ -102 +102 @@ Resource Groups defines its own set of condition keys and also supports using so -To see a list of Resource Groups condition keys, and learn with which actions and resources you can use a condition key, see [Actions, Resources, and Condition Keys for AWS Resource Groups](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awsresourcegroups.html) in the _IAM User Guide_. +To see a list of Resource Groups condition keys, and learn with which actions and resources you can use a condition key, see [Actions, Resources, and Condition Keys for AWS Resource Groups](https://docs.aws.amazon.com//IAM/latest/UserGuide/list_awsresourcegroups.html) in the _IAM User Guide_. @@ -114 +114 @@ Resource Groups does not support resource-based policies. -You can attach tags to groups in Resource Groups, or pass tags in a request to Resource Groups. To control access based on tags, you provide tag information in the [condition element](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) of a policy using the `aws:ResourceTag/`key-name``, `aws:RequestTag/`key-name``, or `aws:TagKeys` condition keys. You can apply tags to a group when you are creating or updating the group. For more information about tagging a group in Resource Groups, see [Creating query-based groups in AWS Resource Groups](./gettingstarted-query.html) and [Updating groups in AWS Resource Groups](./updating-resource-groups.html) in this guide. +You can attach tags to groups in Resource Groups, or pass tags in a request to Resource Groups. To control access based on tags, you provide tag information in the [condition element](https://docs.aws.amazon.com//IAM/latest/UserGuide/reference_policies_elements_condition.html) of a policy using the `aws:ResourceTag/`key-name``, `aws:RequestTag/`key-name``, or `aws:TagKeys` condition keys. You can apply tags to a group when you are creating or updating the group. For more information about tagging a group in Resource Groups, see [Creating query-based groups in AWS Resource Groups](./gettingstarted-query.html) and [Updating groups in AWS Resource Groups](./updating-resource-groups.html) in this guide. @@ -120 +120 @@ To view an example identity-based policy for limiting access to a resource based -An [IAM role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) is an entity within your AWS account that has specific permissions. Resource Groups does not have or use service roles. +An [IAM role](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_roles.html) is an entity within your AWS account that has specific permissions. Resource Groups does not have or use service roles. @@ -124 +124 @@ An [IAM role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) is -In Resource Groups, you can use temporary credentials to sign in with federation, assume an IAM role, or to assume a cross-account role. You obtain temporary security credentials by calling AWS STS API operations such as [AssumeRole](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html) or [GetFederationToken](https://docs.aws.amazon.com/STS/latest/APIReference/API_GetFederationToken.html). +In Resource Groups, you can use temporary credentials to sign in with federation, assume an IAM role, or to assume a cross-account role. You obtain temporary security credentials by calling AWS STS API operations such as [AssumeRole](https://docs.aws.amazon.com//STS/latest/APIReference/API_AssumeRole.html) or [GetFederationToken](https://docs.aws.amazon.com//STS/latest/APIReference/API_GetFederationToken.html). @@ -128 +128 @@ In Resource Groups, you can use temporary credentials to sign in with federation -[Service-linked roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role) allow AWS services to access resources in other services to complete an action on your behalf. +[Service-linked roles](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role) allow AWS services to access resources in other services to complete an action on your behalf. @@ -134 +134 @@ Resource Groups does not have or use service-linked roles. -This feature allows a service to assume a [service role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-role) on your behalf. +This feature allows a service to assume a [service role](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-role) on your behalf.