AWS devicefarm documentation change

Service: devicefarm · 2025-11-22 · Documentation low

File: devicefarm/latest/developerguide/how-to-create-project.md

Summary

Added documentation for optional VPC settings, Execution Role ARN, and Environment Variables configuration during project creation. Includes security guidance about avoiding sensitive data in environment variables.

Security assessment

The change adds security documentation by recommending against storing sensitive values in environment variables and suggesting IAM roles with AWS Secrets Manager. However, there's no evidence of addressing a specific existing security vulnerability.

Diff

diff --git a/devicefarm/latest/developerguide/how-to-create-project.md b/devicefarm/latest/developerguide/how-to-create-project.md
index 5c8b3447d..98e91c2db 100644
--- a//devicefarm/latest/developerguide/how-to-create-project.md
+++ b//devicefarm/latest/developerguide/how-to-create-project.md
@@ -26 +26 @@ You can create a project by using the AWS Device Farm console, AWS CLI, or AWS D
-  4. Enter a name for your project, then choose **Submit**.
+  4. Enter a name for your project. Optionally, you may supply one or more of the parameters below, then choose **Submit**.
@@ -28 +28,16 @@ You can create a project by using the AWS Device Farm console, AWS CLI, or AWS D
-  5. To specify settings for the project, choose **Project settings**. These settings include the default timeout for test runs. After the settings are applied, they are used by all test runs for the project. For more information, see [Setting the execution timeout for test runs in AWS Device Farm](./how-to-set-default-timeout-for-test-runs.html).
+###### Optional configuration parameters:
+
+**Virtual Private Cloud (VPC) settings**
+    
+
+Select a VPC, subnets, and security group to be applied to the device under test and its paired test host. This feature is only supported with private devices. See [VPC-ENI in AWS Device Farm](./vpc-eni.html) for more information.
+
+**Execution Role ARN**
+    
+
+An IAM role to be assumed by the test runner in custom test environments. For more information, see [Access AWS resources using an IAM Execution Role](./custom-test-environments-iam-roles.html).
+
+**Environment Variables**
+    
+
+One or more variables to be inserted into the environment of the test execution runner process. Variable names beginning with "DEVICEFARM_" are reserved for service use. We recommend against storing sensitive values in these environment variables, and instead suggest using an IAM execution role to fetch such values from AWS Secrets Manager during your test.