AWS solutions documentation change
Summary
Updated logo paths, clarified property conflicts, and enhanced IAM permissions documentation
Security assessment
Added critical clarification for IAM permissions: explicitly states wildcard resource usage ('*') for Translate actions and warns to use Function.addToRolePolicy() for service-specific resources. This improves security documentation by clarifying permission scope and best practices, though no specific vulnerability is addressed. Other changes are cosmetic (image URLs) or clarify property conflicts.
Diff
diff --git a/solutions/latest/constructs/aws_lambda_translate.md b/solutions/latest/constructs/aws_lambda_translate.md index 189827b8d..c36850d38 100644 --- a//solutions/latest/constructs/aws_lambda_translate.md +++ b//solutions/latest/constructs/aws_lambda_translate.md @@ -16,3 +16,3 @@ OverviewPattern Construct PropsPattern PropertiesDefault settingsArchitectureGit - Python | `aws_solutions_constructs.aws_lambda_translate` - Typescript | `@aws-solutions-constructs/aws-lambda-translate` - Java | `software.amazon.awsconstructs.services.lambdatranslate` + Python | `aws_solutions_constructs.aws_lambda_translate` + Typescript | `@aws-solutions-constructs/aws-lambda-translate` + Java | `software.amazon.awsconstructs.services.lambdatranslate` @@ -86,2 +86,2 @@ Java -existingLambdaObj? | [`lambda.Function`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_lambda.Function.html) | Existing instance of Lambda Function object, providing both this and `lambdaFunctionProps` will cause an error. -lambdaFunctionProps? | [`lambda.FunctionProps`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_lambda.FunctionProps.html) | Optional user provided props to override the default props for the Lambda function. +existingLambdaObj? | [`lambda.Function`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_lambda.Function.html) | Optional - instance of an existing Lambda Function object, providing both this and `lambdaFunctionProps` will cause an error. +lambdaFunctionProps? | [`lambda.FunctionProps`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_lambda.FunctionProps.html) | Optional - user provided props to override the default props for the Lambda function. Providing both this and `existingLambdaObj` causes an error. @@ -89 +89 @@ asyncJobs? | `boolean` | Whether to enable asynchronous translation jobs. When -existingSourceBucketObj? | [`s3.IBucket`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3.IBucket.html) | Existing instance of S3 Bucket object for source files. If this is provided, then also providing sourceBucketProps is an error. Only valid when asyncJobs is true. +existingSourceBucketObj? | [`s3.IBucket`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3.IBucket.html) | Existing instance of S3 Bucket object for source files. If this is provided, then also providing sourceBucketProps causes an error. Only valid when asyncJobs is true. @@ -91 +91 @@ sourceBucketProps? | [`s3.BucketProps`](https://docs.aws.amazon.com/cdk/api/v2/ -existingDestinationBucketObj? | [`s3.IBucket`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3.IBucket.html) | Existing instance of S3 Bucket object for translation results. If this is provided, then also providing destinationBucketProps is an error. Only valid when asyncJobs is true. +existingDestinationBucketObj? | [`s3.IBucket`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3.IBucket.html) | Existing instance of S3 Bucket object for translation results. If this is provided, then also providing destinationBucketProps causes an error. Only valid when asyncJobs is true. @@ -94 +94 @@ useSameBucket? | `boolean` | Whether to use the same S3 bucket for both source -additionalPermissions? | `string[]` | Optional array of additional IAM permissions to grant to the Lambda function for Amazon Translate. Default: ['translate:TranslateText', 'translate:TranslateDocument'] +additionalPermissions? | `string[]` | Optional array of additional IAM permissions to grant to the Lambda function for Amazon Translate. This is intended for use with Translate actions and will assign a resource of '*' - permissions for other services with specific resources should add the permssion using Function.addToRolePolicy(). Always added: ['translate:TranslateText', 'translate:TranslateDocument']