AWS m2 documentation change
Summary
Added IAM policy example for S3 access and updated deployment file format
Security assessment
Provides security-focused IAM policy guidance but doesn't indicate resolution of a specific vulnerability. Improves security documentation quality.
Diff
diff --git a/m2/latest/userguide/ba-runtime-options.md b/m2/latest/userguide/ba-runtime-options.md index 611d760a2..e9a4a4948 100644 --- a//m2/latest/userguide/ba-runtime-options.md +++ b//m2/latest/userguide/ba-runtime-options.md @@ -83 +83 @@ The Developer Runtime is ideal during initial development and modernization proj -Access to the BluInsights Toolbox is provided as part of your AWS Blu Age project engagement. The Developer Runtime is available through AWS Blu Age toolbox requests. Once approved, you'll have access to specific S3 buckets: `s3://toolbox-dev-runtime-<region>` +Access to the [BluInsights Toolbox](https://bluinsights.aws/docs/bluage-toolbox-introduction) is provided as part of your AWS Blu Age project engagement. The Developer Runtime is available through AWS Blu Age toolbox requests. Once approved, you'll have access to specific S3 buckets: `s3://toolbox-dev-runtime-<region>` @@ -87 +87,20 @@ These buckets are available in the us-east-1 and us-east-2 regions. To use the a -For detailed instructions on how to request access and set up the necessary permissions, see [Dev and Special AWS Blu Age Runtimes](https://bluinsights.aws/docs/dev-special-bluage-runtime) documentation. +S3 read permissions are required on the principal accessing the bucket from the authorized account. Below is an example policy allowing all read actions on the `s3://toolbox-dev-runtime` bucket: + + + { + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Resource": [ + "arn:aws:s3:::toolbox-dev-runtime", + "arn:aws:s3:::toolbox-dev-runtime/*" + ] + } + ] + } @@ -103 +122 @@ To deploy the Developer Runtime: - aws s3 cp s3://toolbox-dev-runtime/[version]/gapwalk-[version]-dev.tar.gz + aws s3 cp s3://toolbox-dev-runtime/[version]/gapwalk-[version].zip @@ -110,6 +128,0 @@ To deploy the Developer Runtime: -For more detailed deployment instructions and usage guidelines, see [Dev and Special AWS Blu Age Runtimes](https://bluinsights.aws/docs/dev-special-bluage-runtime) documentation. - -###### Note - -Ensure you have the necessary S3 read permissions on your AWS account to access these buckets. An example IAM policy can be found in the [Dev and Special AWS Blu Age Runtimes](https://bluinsights.aws/docs/dev-special-bluage-runtime) documentation. -