AWS systems-manager medium security documentation change
Summary
Removed 'Before you begin' section including IAM permissions required for CodeGuru Security integration with aws:executeScript actions
Security assessment
Removal of documentation about required CodeGuru Security permissions could lead to misconfigured security scanning for automation scripts. This directly impacts security posture by omitting required steps for vulnerability detection.
Diff
diff --git a/systems-manager/latest/userguide/automation-visual-designer.md b/systems-manager/latest/userguide/automation-visual-designer.md index 7e1840f48..94c0bc7d5 100644 --- a//systems-manager/latest/userguide/automation-visual-designer.md +++ b//systems-manager/latest/userguide/automation-visual-designer.md @@ -5,2 +4,0 @@ -Before you begin - @@ -28,30 +25,0 @@ When you create or edit a runbook, you can access the visual design experience f -## Before you begin - -To use the visual design experience, you need an AWS account, and credentials that provide the correct permissions for any resources that you want to use. - -In the visual design experience, Automation integrates with Amazon CodeGuru Security to help you detect security policy violations and vulnerabilities in your Python scripts. To use this feature for `aws:executeScript` actions, your AWS Identity and Access Management (IAM) policy must include the following permissions: - -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "codeguru-security:CreateUploadUrl", - "codeguru-security:CreateScan", - "codeguru-security:GetScan", - "codeguru-security:GetFindings" - ], - "Resource": "*" - } - ] - } - -